Warning: Permanently added '[localhost]:51575' (ECDSA) to the list of known hosts. 2026/01/17 14:49:10 fuzzer started 2026/01/17 14:49:10 dialing manager at localhost:42157 syzkaller login: [ 44.219782] cgroup: Unknown subsys name 'net' [ 44.307793] cgroup: Unknown subsys name 'cpuset' [ 44.327490] cgroup: Unknown subsys name 'rlimit' 2026/01/17 14:49:21 syscalls: 201 2026/01/17 14:49:21 code coverage: enabled 2026/01/17 14:49:21 comparison tracing: enabled 2026/01/17 14:49:21 extra coverage: enabled 2026/01/17 14:49:21 setuid sandbox: enabled 2026/01/17 14:49:21 namespace sandbox: enabled 2026/01/17 14:49:21 Android sandbox: enabled 2026/01/17 14:49:21 fault injection: enabled 2026/01/17 14:49:21 leak checking: enabled 2026/01/17 14:49:21 net packet injection: enabled 2026/01/17 14:49:21 net device setup: enabled 2026/01/17 14:49:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 14:49:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 14:49:21 USB emulation: enabled 2026/01/17 14:49:21 hci packet injection: enabled 2026/01/17 14:49:21 wifi device emulation: enabled 2026/01/17 14:49:21 802.15.4 emulation: enabled 2026/01/17 14:49:21 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 14:49:22 starting 8 fuzzer processes 14:49:22 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_io_uring_setup(0x3613, &(0x7f0000000680)={0x0, 0xb864, 0x1, 0x0, 0x2d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000780)=0x80000000, 0x0, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000a40)=0x7, 0x0, 0x4) 14:49:22 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000a80)={0x5d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x7, 0x2c, 0x1ff}, {0x4, 0x20, 0x1, 0x80000000}, {0x8, 0x1, 0x2, 0x1}, {0x7, 0x9, 0x9, 0x4}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 14:49:22 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) timerfd_gettime(r7, &(0x7f0000001680)) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004) 14:49:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r8, {r4, r7}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f00000005c0)={0xffffffff, [0x0, 0x52], 0x9}, 0x10) 14:49:22 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r12, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) syz_open_pts(r10, 0x40000) 14:49:22 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) sysinfo(&(0x7f0000000800)=""/161) r2 = syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x32800) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000900)={0x20, 0x3, 0xaa0, 0x9}) 14:49:22 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000000440)={0x50, 0x20, 0x8, 0x20, 0xc1, 0x9}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) getegid() 14:49:22 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000}, 0x2000c030) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000001dc0)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) [ 55.299245] audit: type=1400 audit(1768661362.884:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 56.445542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.447600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.452380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.459733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.462690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.512877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.520764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.522736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.525558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.527613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.530404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.533448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.539426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.553818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.583249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.595953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.602269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.615419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.620285] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.622264] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.625246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.627260] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 56.654806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.672869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.682471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.684039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.685723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.690674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.699967] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.703554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.706436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.710059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.715493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.773435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.775730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.862629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.902471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.907795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.911063] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.914048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.539790] Bluetooth: hci0: command tx timeout [ 58.603193] Bluetooth: hci1: command tx timeout [ 58.604255] Bluetooth: hci2: command tx timeout [ 58.795199] Bluetooth: hci3: command tx timeout [ 58.860041] Bluetooth: hci7: command tx timeout [ 59.053007] Bluetooth: hci4: command tx timeout [ 59.115504] Bluetooth: hci6: command tx timeout [ 59.244060] Bluetooth: hci5: command tx timeout [ 60.588145] Bluetooth: hci0: command tx timeout [ 60.652207] Bluetooth: hci2: command tx timeout [ 60.652650] Bluetooth: hci1: command tx timeout [ 60.844314] Bluetooth: hci3: command tx timeout [ 60.907151] Bluetooth: hci7: command tx timeout [ 61.100213] Bluetooth: hci4: command tx timeout [ 61.163433] Bluetooth: hci6: command tx timeout [ 61.291880] Bluetooth: hci5: command tx timeout [ 62.186373] modprobe (762) used greatest stack depth: 24048 bytes left [ 62.635171] Bluetooth: hci0: command tx timeout [ 62.699167] Bluetooth: hci1: command tx timeout [ 62.699567] Bluetooth: hci2: command tx timeout [ 62.891158] Bluetooth: hci3: command tx timeout [ 62.956206] Bluetooth: hci7: command tx timeout [ 63.148189] Bluetooth: hci4: command tx timeout [ 63.211185] Bluetooth: hci6: command tx timeout [ 63.339767] Bluetooth: hci5: command tx timeout [ 64.683167] Bluetooth: hci0: command tx timeout [ 64.748875] Bluetooth: hci2: command tx timeout [ 64.749428] Bluetooth: hci1: command tx timeout [ 64.939235] Bluetooth: hci3: command tx timeout [ 65.003149] Bluetooth: hci7: command tx timeout [ 65.195164] Bluetooth: hci4: command tx timeout [ 65.259269] Bluetooth: hci6: command tx timeout [ 65.387285] Bluetooth: hci5: command tx timeout [ 90.213495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.225341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.520237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.520858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.815263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.815879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.077153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.077818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.176506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.177145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.333662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.334315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000000440)={0x50, 0x20, 0x8, 0x20, 0xc1, 0x9}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) getegid() [ 92.475844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.476480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.521698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.522321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000000440)={0x50, 0x20, 0x8, 0x20, 0xc1, 0x9}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) getegid() [ 92.587408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.588017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:50:00 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r12, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) syz_open_pts(r10, 0x40000) 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000000440)={0x50, 0x20, 0x8, 0x20, 0xc1, 0x9}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) getegid() [ 92.705436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.706056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000000440)={0x50, 0x20, 0x8, 0x20, 0xc1, 0x9}) syz_open_dev$tty20(0xc, 0x4, 0x1) getegid() 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000000440)={0x50, 0x20, 0x8, 0x20, 0xc1, 0x9}) getegid() 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x440001, 0x0) getegid() 14:50:00 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) ioctl$TIOCNXCL(r0, 0x540d) getegid() [ 92.859314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.859912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.881505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.882229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.977983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.979449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.059341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.059939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.144315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.145419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.150164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.150776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:50:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r8, {r4, r7}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f00000005c0)={0xffffffff, [0x0, 0x52], 0x9}, 0x10) 14:50:15 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000}, 0x2000c030) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000001dc0)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:15 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r12, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) syz_open_pts(r10, 0x40000) 14:50:15 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) timerfd_gettime(r7, &(0x7f0000001680)) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004) 14:50:15 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) syz_open_pts(r0, 0x12002) getegid() 14:50:15 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000a80)={0x5d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x7, 0x2c, 0x1ff}, {0x4, 0x20, 0x1, 0x80000000}, {0x8, 0x1, 0x2, 0x1}, {0x7, 0x9, 0x9, 0x4}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 14:50:15 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) sysinfo(&(0x7f0000000800)=""/161) r2 = syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x32800) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000900)={0x20, 0x3, 0xaa0, 0x9}) 14:50:15 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_io_uring_setup(0x3613, &(0x7f0000000680)={0x0, 0xb864, 0x1, 0x0, 0x2d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000780)=0x80000000, 0x0, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000a40)=0x7, 0x0, 0x4) 14:50:15 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000}, 0x2000c030) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000001dc0)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:15 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_io_uring_setup(0x3613, &(0x7f0000000680)={0x0, 0xb864, 0x1, 0x0, 0x2d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000780)=0x80000000, 0x0, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000a40)=0x7, 0x0, 0x4) 14:50:15 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) timerfd_gettime(r7, &(0x7f0000001680)) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004) 14:50:15 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000003c0)=0x1000) getegid() 14:50:15 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) sysinfo(&(0x7f0000000800)=""/161) r2 = syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x32800) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000900)={0x20, 0x3, 0xaa0, 0x9}) 14:50:15 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r12, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) syz_open_pts(r10, 0x40000) 14:50:15 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000}, 0x2000c030) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000001dc0)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:23 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) timerfd_gettime(r7, &(0x7f0000001680)) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004) 14:50:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r8, {r4, r7}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f00000005c0)={0xffffffff, [0x0, 0x52], 0x9}, 0x10) 14:50:23 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r11, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:23 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) sysinfo(&(0x7f0000000800)=""/161) r2 = syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x32800) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000900)={0x20, 0x3, 0xaa0, 0x9}) 14:50:23 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) migrate_pages(0xffffffffffffffff, 0x800, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x3) getegid() 14:50:23 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_io_uring_setup(0x3613, &(0x7f0000000680)={0x0, 0xb864, 0x1, 0x0, 0x2d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000780)=0x80000000, 0x0, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000a40)=0x7, 0x0, 0x4) 14:50:23 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000}, 0x2000c030) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:23 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000a80)={0x5d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x7, 0x2c, 0x1ff}, {0x4, 0x20, 0x1, 0x80000000}, {0x8, 0x1, 0x2, 0x1}, {0x7, 0x9, 0x9, 0x4}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 14:50:23 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:23 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) read$rfkill(r0, &(0x7f0000000300), 0x8) getegid() 14:50:23 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_io_uring_setup(0x3613, &(0x7f0000000680)={0x0, 0xb864, 0x1, 0x0, 0x2d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000780)=0x80000000, 0x0, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:23 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) timerfd_gettime(r7, &(0x7f0000001680)) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:23 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:23 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) sysinfo(&(0x7f0000000800)=""/161) syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x32800) 14:50:31 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000001c80)=@type=0x3) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:31 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:31 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) sysinfo(&(0x7f0000000800)=""/161) 14:50:31 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r10, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:31 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000001c0)="394529c2ff70f47ae35055cbddf04ae54967139592fe5acd3abcf3811bd31f13b4dcadb99299bd06def5cf24426ee2403d1205cbc19dbc2293f7763fd8af910920ed0a2a4aa853a781f650cde7ca4fde880c1f2028ba37489830258ba4116486a4768ffd24c9822988d6a42f7d2a046bfb1b20663d3ab050358b68d313e896aca2db9db6c9327bd18c94dc21fa6cd95cfc7d7fac53f19e50804835d9c12f986f300d9f7280bbda69034800c094ac20d4f054b0c4f4cd", 0xb6, 0x9, 0x0, 0x0, r0}, &(0x7f00000002c0)) getegid() 14:50:31 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000a80)={0x5d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x7, 0x2c, 0x1ff}, {0x4, 0x20, 0x1, 0x80000000}, {0x8, 0x1, 0x2, 0x1}, {0x7, 0x9, 0x9, 0x4}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 14:50:31 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_io_uring_setup(0x3613, &(0x7f0000000680)={0x0, 0xb864, 0x1, 0x0, 0x2d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r8, {r4, r7}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f00000005c0)={0xffffffff, [0x0, 0x52], 0x9}, 0x10) 14:50:31 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) waitid(0x0, r3, 0x0, 0x40000000, &(0x7f0000001bc0)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:31 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:31 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r10, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r8, {r4, r7}}, './file0\x00'}) 14:50:40 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) 14:50:40 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) io_setup(0x2, &(0x7f0000000180)) getegid() 14:50:40 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r10, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000004300), r9) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:40 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") ioctl$CDROMEJECT(r2, 0x5309) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:40 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00'}) 14:50:40 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:40 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:40 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r11, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000004280), &(0x7f00000042c0)=0x10) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:40 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) read$rfkill(r0, &(0x7f0000000140), 0x8) getegid() 14:50:40 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000001ac0)="f0ad42d0be6944a76a8d83442e36f20d230df76109f5fe3c62af6da090b10700a6547c3b0f48550ed8cd98aa1b129bfc502c0b0f03f8dc2e72f428ce8843e7b99e1a1dd708cb4f340624a490f786722e185e298731d1f8e53ff5098d4c3c45618905f9325fa0ff9e5d8737327bfb1fb714014ff0b53815ef1a5821caa1b76f70209ea03f56da5bf228972e9097559d233e85ddec5ec39fd1a7e6c3e8b24e0776fa34d87a80c08e36a5297eec7a7f858f3dfc7b791cb003e26e254bf32b19c997ceded84b0be0e27256c005cf8e81ac00c98feabbb4a32f80821f") syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:40 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:40 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000001080)='net/sco\x00') socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x9) 14:50:49 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) r4 = io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x8000000) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:49 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r11, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004240)) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:49 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)) 14:50:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x208280, 0x0) 14:50:49 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCNXCL(r0, 0x540d) getegid() 14:50:49 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:49 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:49 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) getrusage(0x1, &(0x7f0000000740)) io_destroy(0x0) 14:50:49 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) getegid() 14:50:49 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r11, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:49 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) io_uring_setup(0x39b, &(0x7f0000001a40)={0x0, 0x9d8b, 0x8, 0x0, 0xd6, 0x0, r1}) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:49 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:49 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:49 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) io_destroy(0x0) 14:50:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) ioctl$TIOCNXCL(r2, 0x540d) 14:50:50 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) getegid() 14:50:58 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) waitid(0x0, r3, &(0x7f0000001900), 0x4, &(0x7f0000001980)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:58 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) read$char_usb(r3, &(0x7f0000000480)=""/175, 0xaf) 14:50:58 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) getegid() 14:50:58 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:58 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)) 14:50:58 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/170, 0xaa}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x3) io_destroy(0x0) 14:50:58 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:58 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) getegid() 14:50:58 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880), &(0x7f00000018c0)=0xc) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:50:58 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:50:58 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:50:58 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:50:58 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) io_destroy(0x0) 14:50:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000440)) 14:50:58 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:07 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:07 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:07 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)) 14:51:07 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:07 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001880), &(0x7f00000018c0)=0xc) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:07 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) getegid() 14:51:07 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:07 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) getegid() 14:51:07 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:07 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:07 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:07 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:14 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000) 14:51:14 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:14 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) 14:51:14 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:14 executing program 5: getegid() 14:51:14 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:14 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:14 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:14 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:14 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_open_dev$mouse(&(0x7f0000000d40), 0x9, 0x280) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:14 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:14 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r6 = memfd_secret(0x80000) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r8}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6922d935}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:14 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:14 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) 14:51:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0xc00c0c1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:22 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:22 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_destroy(0x0) 14:51:22 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x4708f2b6f1437ed9, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ff4}]}, 0x30}}, 0x4004044) 14:51:22 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r5 = memfd_secret(0x80000) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r3, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r7}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) read$char_usb(r2, &(0x7f0000004040)=""/146, 0x92) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r10, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:22 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:22 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:22 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:23 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:23 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:23 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:51:23 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:23 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:23 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r5 = memfd_secret(0x80000) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r3, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt={'uid>', r7}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r10, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xe1, 0x1, 0x1, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x1, 0x7e}}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:23 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$tcp_congestion(r2, &(0x7f0000001640)='westwood\x00', 0x9) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:23 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:23 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) [ 179.567623] Bluetooth: hci3: command 0x0406 tx timeout [ 179.569305] Bluetooth: hci6: command 0x0406 tx timeout [ 179.570482] Bluetooth: hci2: command 0x0406 tx timeout [ 179.571492] Bluetooth: hci4: command 0x0406 tx timeout [ 179.573239] Bluetooth: hci7: command 0x0406 tx timeout [ 179.574275] Bluetooth: hci0: command 0x0406 tx timeout [ 179.574318] Bluetooth: hci1: command 0x0406 tx timeout [ 179.575260] Bluetooth: hci5: command 0x0406 tx timeout 14:51:32 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:51:32 executing program 0: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:32 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:32 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) memfd_secret(0x80000) syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r3, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r6, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:32 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:32 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:32 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:51:32 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:32 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) memfd_secret(0x80000) syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r3, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r6, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:32 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:32 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:32 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) 14:51:32 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r1, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0xe3, 0x9376, 0x4, 0x7}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:32 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) memfd_secret(0x80000) syz_open_dev$ptys(0xc, 0x3, 0x1) recvmsg$unix(r3, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/60, 0x3c}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/22, 0x16}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r6, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:40 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:40 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r1, 0x0) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:40 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) 14:51:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xce, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:40 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:40 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:40 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:51:40 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r4 = memfd_secret(0x80000) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r6, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:40 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:40 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) 14:51:40 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:40 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sysinfo(&(0x7f00000002c0)=""/120) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:40 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:40 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) r4 = memfd_secret(0x80000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r5, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:40 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:40 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:40 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:48 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:48 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x282601, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:48 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:51:48 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:48 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/153, 0x99}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/129, 0x81}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:48 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x17}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:51:56 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x309200, 0x0) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:56 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:51:56 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:51:56 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:57 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:57 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) getrusage(0xffffffffffffffff, &(0x7f00000013c0)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:57 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:57 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r3 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r3, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000084) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:51:57 executing program 6: r0 = getpid() wait4(r0, &(0x7f00000012c0), 0x4, &(0x7f0000001300)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:57 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:57 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x27, 0xe, 0x2, &(0x7f00000016c0)) 14:51:57 executing program 3: r0 = getegid() setregid(0xee00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/30, 0x1e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/255, 0xff}], 0x9, &(0x7f0000002640)}, 0x2000) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:51:57 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:57 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:51:57 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:51:57 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) sysinfo(&(0x7f0000000200)=""/120) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:51:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:51:57 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:51:57 executing program 6: getpid() waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:51:57 executing program 3: r0 = getegid() setregid(0xee00, r0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:52:05 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x0, 0xe, 0x2, &(0x7f00000016c0)) 14:52:05 executing program 6: getpid() waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:52:05 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:52:05 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:52:05 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) sysinfo(&(0x7f0000000180)=""/115) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:52:05 executing program 3: r0 = getegid() setregid(0xee00, r0) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:52:05 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:52:05 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:52:05 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x0, 0x0, 0x2, &(0x7f00000016c0)) 14:52:05 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:52:05 executing program 3: getegid() mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:52:05 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:52:05 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:52:05 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:52:05 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:52:05 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x100, 0x1f, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') [ 218.409711] [ 218.409903] ===================================== [ 218.410285] WARNING: bad unlock balance detected! [ 218.410674] 6.19.0-rc5-next-20260116 #1 Not tainted [ 218.411067] ------------------------------------- [ 218.411443] syz-executor.0/4557 is trying to release lock (rcu_read_lock) at: [ 218.412007] [] __wait_on_freeing_inode+0x105/0x350 [ 218.412525] but there are no more locks to release! [ 218.412912] [ 218.412912] other info that might help us debug this: [ 218.413933] 4 locks held by syz-executor.0/4557: [ 218.414951] #0: ffff88800faa43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 218.416610] #1: ffff88801b9503e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 218.418846] #2: ffff88800fab0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 218.420532] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 218.422377] [ 218.422377] stack backtrace: [ 218.422744] CPU: 0 UID: 0 PID: 4557 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 218.422759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 218.422766] Call Trace: [ 218.422770] [ 218.422774] dump_stack_lvl+0xca/0x120 [ 218.422802] ? __wait_on_freeing_inode+0x105/0x350 [ 218.422816] print_unlock_imbalance_bug+0x118/0x130 [ 218.422832] ? __wait_on_freeing_inode+0x105/0x350 [ 218.422846] lock_release+0x1ee/0x270 [ 218.422860] __wait_on_freeing_inode+0x10a/0x350 [ 218.422875] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 218.422890] ? __pfx_var_wake_function+0x10/0x10 [ 218.422907] ? lock_is_held_type+0x9e/0x120 [ 218.422919] insert_inode_locked+0x25f/0x890 [ 218.422935] __ext4_new_inode+0x223d/0x4cd0 [ 218.422953] ? __pfx___ext4_new_inode+0x10/0x10 [ 218.422967] ? __pfx___dquot_initialize+0x10/0x10 [ 218.422985] ? __pfx_avc_has_perm+0x10/0x10 [ 218.423001] ext4_symlink+0x623/0xb40 [ 218.423020] ? __pfx_ext4_symlink+0x10/0x10 [ 218.423035] ? security_inode_permission+0x72/0xe0 [ 218.423048] vfs_symlink+0x44b/0x840 [ 218.423064] filename_symlinkat+0x158/0x440 [ 218.423078] ? __pfx_filename_symlinkat+0x10/0x10 [ 218.423092] ? strncpy_from_user+0x21b/0x2f0 [ 218.423109] __x64_sys_symlink+0x82/0x110 [ 218.423122] do_syscall_64+0xbf/0x420 [ 218.423135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.423147] RIP: 0033:0x7fab773ac427 [ 218.423157] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 218.423168] RSP: 002b:00007ffc81451638 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 218.423179] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab773ac427 [ 218.423186] RDX: 00007ffc81451717 RSI: 00007fab77407019 RDI: 00007ffc81451700 [ 218.423193] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc814514d0 [ 218.423200] R10: 00007ffc81451387 R11: 0000000000000202 R12: 0000000000000001 [ 218.423208] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc81451700 [ 218.423218] [ 218.439701] ------------[ cut here ]------------ [ 218.440093] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.0/4557 [ 218.468830] Modules linked in: [ 218.499620] CPU: 0 UID: 0 PID: 4557 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 218.541330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 218.542006] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 218.560572] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 218.577964] RSP: 0018:ffff888043ac79a0 EFLAGS: 00010286 [ 218.592661] RAX: 00000000ffffffff RBX: ffff88801a553700 RCX: ffffffff815660f7 [ 218.613262] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801a553afc [ 218.613850] RBP: ffff88801a553700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 218.637373] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801a553700 [ 218.637964] R13: 0000000000000001 R14: ffffffff85c0c390 R15: ffff88803d57bc48 [ 218.662782] FS: 00005555852f5400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 218.687362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.687848] CR2: 00007fab7742c540 CR3: 0000000040f3d000 CR4: 0000000000350ef0 [ 218.742572] Call Trace: [ 218.742909] [ 218.804432] __wait_on_freeing_inode+0x10f/0x350 [ 218.837413] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 218.870775] ? __pfx_var_wake_function+0x10/0x10 [ 218.901015] ? lock_is_held_type+0x9e/0x120 [ 218.930859] insert_inode_locked+0x25f/0x890 [ 218.993763] __ext4_new_inode+0x223d/0x4cd0 [ 219.030910] ? __pfx___ext4_new_inode+0x10/0x10 [ 219.032172] ? __pfx___dquot_initialize+0x10/0x10 [ 219.032911] ? __pfx_avc_has_perm+0x10/0x10 [ 219.034685] ext4_symlink+0x623/0xb40 [ 219.036910] ? __pfx_ext4_symlink+0x10/0x10 [ 219.037971] ? security_inode_permission+0x72/0xe0 [ 219.039612] vfs_symlink+0x44b/0x840 [ 219.040875] filename_symlinkat+0x158/0x440 [ 219.042009] ? __pfx_filename_symlinkat+0x10/0x10 [ 219.042788] ? strncpy_from_user+0x21b/0x2f0 [ 219.045803] __x64_sys_symlink+0x82/0x110 [ 219.047366] do_syscall_64+0xbf/0x420 [ 219.048215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.048725] RIP: 0033:0x7fab773ac427 [ 219.049094] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 219.050649] RSP: 002b:00007ffc81451638 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 219.051306] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab773ac427 [ 219.051877] RDX: 00007ffc81451717 RSI: 00007fab77407019 RDI: 00007ffc81451700 [ 219.052494] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc814514d0 [ 219.053077] R10: 00007ffc81451387 R11: 0000000000000202 R12: 0000000000000001 [ 219.053695] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc81451700 [ 219.056477] [ 219.056674] irq event stamp: 175 [ 219.056949] hardirqs last enabled at (175): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 219.057864] hardirqs last disabled at (174): [] _raw_spin_lock_irqsave+0x53/0x60 [ 219.058707] softirqs last enabled at (170): [] kernel_fpu_end+0x59/0x70 [ 219.059486] softirqs last disabled at (168): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 219.060328] ---[ end trace 0000000000000000 ]--- 14:52:06 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:52:06 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="a1d6a4c94408fbdf704edf73e69b2dafb020da951a6f74c3da91c9008c4080679bbaff81c0a815464a113ba779e80c957d4fb0bb0cc624b8de79562badeaa8250eac083e5533952f31f627cfbf027edaacdad14e5fc985eb62f85530cf6d9d4ecb831b5f0a7c68408222a923745a18ec1d0b4738ff9333b17131bc1905") 14:52:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 14:52:06 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:52:06 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x0, 0x0, 0x2, &(0x7f00000016c0)) 14:52:06 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f00000000c0)=""/178) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:52:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 14:52:15 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:52:15 executing program 3: getegid() mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:52:15 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f0000000180)=""/115) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:52:15 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x0, 0x0, 0x2, &(0x7f00000016c0)) 14:52:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 14:52:15 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:52:15 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4040040) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x24200, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa5) syz_open_dev$mouse(&(0x7f0000000440), 0x800, 0x22000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/sockstat\x00') 14:52:15 executing program 5: r0 = syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r2 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x144053, r0, 0x8000000) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:52:15 executing program 3: getegid() mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x1800c00, &(0x7f0000003f00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@fscache}], [{@uid_gt}, {@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x62, 0x61, 0x36, 0x39, 0x31, 0x35], 0x2d, [0x33, 0x33, 0x37, 0x36], 0x2d, [0x33, 0x63, 0x62, 0x63], 0x2d, [0x39, 0x63, 0x65, 0x33], 0x2d, [0x6c, 0x61, 0x39, 0x39, 0x3, 0x34, 0x3, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa\x00'}}, {@obj_type={'obj_type', 0x3d, '{()&'}}, {@appraise}, {@audit}]}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x800) mount$9p_fd(0x0, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380), 0x31, &(0x7f00000043c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0xffff}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_none}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, 'audit'}}]}}) openat$sr(0xffffffffffffff9c, &(0x7f00000044c0), 0x56400, 0x0) 14:52:15 executing program 4: sysinfo(&(0x7f0000000000)=""/143) sysinfo(&(0x7f0000000180)=""/115) io_setup(0x9, &(0x7f00000003c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) io_destroy(0x0) 14:52:15 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000014c0), 0x80000000, &(0x7f0000001540)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000001640)='westwood\x00', 0x9) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001680), 0x4, &(0x7f0000001700)) syz_io_uring_setup(0x1b2d, &(0x7f0000002840)={0x0, 0xfd88, 0x4, 0x0, 0x3e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 14:52:15 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:52:15 executing program 5: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x80000, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) read$rfkill(0xffffffffffffffff, &(0x7f0000000300), 0x8) getpid() syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100010, r1, 0x0) capset(&(0x7f0000000380)={0x20080522, 0xffffffffffffffff}, &(0x7f00000003c0)={0xffffffff, 0x8, 0x2, 0x10000, 0x80000001, 0x7}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 14:52:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000003c0)) 14:52:15 executing program 0: syz_io_uring_setup(0x47de, &(0x7f0000000000)={0x0, 0x52c6, 0x8, 0x0, 0x93}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1c71, &(0x7f0000000200)={0x0, 0x7727, 0x20, 0x3, 0x34d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) select(0x40, &(0x7f0000000500)={0x1, 0x3, 0x3, 0x3, 0x1, 0x9, 0x9, 0x163}, &(0x7f0000000540)={0x18, 0xff, 0x5, 0x4, 0x5, 0x4, 0x34, 0xff}, &(0x7f0000000580)={0x827c, 0x7fff, 0x40, 0x3cac, 0x2, 0x6, 0xd71, 0x3}, &(0x7f00000005c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d434ac6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f4757}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c10d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303928a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f68a15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a4758b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a3a10b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fa66ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2bdda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecbfed6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ab6df5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b679d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a59fd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56bc937e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c96115}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae76}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) VM DIAGNOSIS: 14:52:06 Registers: info registers vcpu 0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888043ac7488 R8 =0000000000000000 R9 =ffffed1001484046 R10=0000000000000074 R11=666666203a312320 R12=0000000000000074 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555852f5400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fab7742c540 CR3=0000000040f3d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3f100 RCX=ffffffff8169dc2a RDX=ffff8880169b5280 RSI=ffffffff8169dc04 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88800a0f76e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9c7e21 R13=ffff88806ce3f108 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169dc06 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f888d7f58c0 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f61da4ee3a4 CR3=000000000dd80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f71aa4917c000007f71aa4917c8 XMM02=00007f71aa4917e000007f71aa4917c0 XMM03=00007f71aa4917c800007f71aa4917c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000