Warning: Permanently added '[localhost]:53759' (ECDSA) to the list of known hosts. 2022/10/02 23:38:40 fuzzer started 2022/10/02 23:38:41 dialing manager at localhost:35095 syzkaller login: [ 41.280897] cgroup: Unknown subsys name 'net' [ 41.337416] cgroup: Unknown subsys name 'rlimit' 2022/10/02 23:38:56 syscalls: 203 2022/10/02 23:38:56 code coverage: enabled 2022/10/02 23:38:56 comparison tracing: enabled 2022/10/02 23:38:56 extra coverage: enabled 2022/10/02 23:38:56 setuid sandbox: enabled 2022/10/02 23:38:56 namespace sandbox: enabled 2022/10/02 23:38:56 Android sandbox: enabled 2022/10/02 23:38:56 fault injection: enabled 2022/10/02 23:38:56 leak checking: enabled 2022/10/02 23:38:56 net packet injection: enabled 2022/10/02 23:38:56 net device setup: enabled 2022/10/02 23:38:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 23:38:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 23:38:56 USB emulation: enabled 2022/10/02 23:38:56 hci packet injection: enabled 2022/10/02 23:38:56 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 23:38:56 802.15.4 emulation: enabled 2022/10/02 23:38:56 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 23:38:57 starting 8 fuzzer processes 23:38:57 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x409f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40086) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10040}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xdc77f21856ef6688}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfe83ac0ee5b23054}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x24000080) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x200900, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r5) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000040}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x5) 23:38:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x8000, 0x7fffffff, 0xb7, 0xfff, 0xff, 0x5b, 0x1}) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x31, 0x8, 0xa, 0xd, 0x0, 0x2, 0x2, 0x6c, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x13dc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x7, 0x69, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x700, 0x8000, 0x2, 0xcdd}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000280)={r3, r4+10000000}, &(0x7f00000002c0)={[0x1]}, 0x8) r5 = syz_open_dev$rtc(&(0x7f0000000300), 0x1, 0x400000) ioctl$RTC_UIE_OFF(r5, 0x7004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x1, 0x6, 0x4, 0x3, 0x17, 0x1, {0x2}}, 0x7) r6 = eventfd(0x40) r7 = syz_open_dev$rtc(&(0x7f0000000380), 0x4e, 0x280200) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000003c0)={0x23, 0x6, 0x13, 0x17, 0x8, 0x0, 0x6, 0xc0}) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000400)={0x10000003}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000004c0)=r0, 0x1) 23:38:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2008000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@cache_fscache}], [{@subj_user={'subj_user', 0x3d, '\'#'}}, {@smackfsdef={'smackfsdef', 0x3d, '&//!!-'}}]}}) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r1 = mq_open(&(0x7f0000000200)='\'#', 0x0, 0x20, &(0x7f0000000240)={0x0, 0x400000000000, 0x40000000000000, 0x1}) mq_getsetattr(r1, &(0x7f0000000280)={0x4, 0x5, 0x6, 0xb42}, &(0x7f00000002c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="2774ccd152790b56a070eb5d9760a7ab", 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$vga_arbiter(r3, &(0x7f00000003c0)=@target={'target ', {'PCI:', '0', ':', '12', ':', '5', '.', '15'}}, 0x15) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='cubic\x00', 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000440)={0x0, 0x0, r3, 0x10000, 0x80000}) r4 = inotify_init() mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xa4c001, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@privport}, {@msize={'msize', 0x3d, 0x6}}, {@version_u}, {@nodevmap}, {@posixacl}, {@access_uid}, {@loose}, {@version_9p2000}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'rfdno'}}, {@obj_role={'obj_role', 0x3d, '.'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq}, {@uid_lt}]}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r5 = inotify_add_watch(r2, &(0x7f00000006c0)='./file1\x00', 0x80) inotify_rm_watch(r3, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000700)="05d84a79d76310ddb9604edd5f44592a", 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r2) inotify_add_watch(r4, &(0x7f0000000780)='./file1\x00', 0x10000008) 23:38:57 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0xc0000) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x9, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xffffffff, 0x4, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x9}, 0x4080844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r1) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x1200]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000) socketpair(0x29, 0x800, 0x6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r6) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000004c0)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000500)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000540)) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1777) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcc}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) 23:38:57 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000740)={r4, 0x8001, 0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000780)="9a26fe9b32a952901f62c0bb1017e051", 0x10) [ 56.918580] audit: type=1400 audit(1664753937.339:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:38:57 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa2080200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x4044000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000002c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r5) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x20a, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000540)=0x8130, 0x4) syz_io_uring_setup(0xf8f, &(0x7f0000000580)={0x0, 0xccb7, 0x4, 0x1, 0x1bf, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000780)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd=r5, 0x9, &(0x7f0000000680)="040b5fe9a78bcda48483b1133adf05fd79504c994f75d8ecafe19780273153d1c09b1ef7360651439eecb60112b61734ca137244c234dd6f14d4225c6a02d51ba44766c471590b70f17f230ea3e7040c5a23be2ae728be71abff018b4ae5960ce148590b08a9f5fc79ca37a73ed111c4bcb6dc4e13fb99ad380655bbdc6bbf2acd659ed1a3f6ad7a87e2503b72d0f76a0be3bc17e181d82b83ec0f9ff4a9c2203ce8b167f3fd975065933d4a7a33aafba1c4ec66592667a7afaed61affa764b99908a407ceb23dc0", 0xc8}, 0xffffffc0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000007c0)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010009}, 0x4) 23:38:57 executing program 6: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffc00}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x131502, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe0000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ad}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x68}}, 0x20000010) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xccc}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x20000800) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1fc, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x1d8, 0x8, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1fc}}, 0x20008001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2007, @fd_index=0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x3) mq_timedreceive(r0, &(0x7f0000000740)=""/173, 0xad, 0x9, &(0x7f0000000800)={0x77359400}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x3c}}, 0x800) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x410, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4085) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004880}, 0x800) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000d00)=""/94, 0x5e, 0x8, &(0x7f0000000dc0)={r3, r4+10000000}) mq_getsetattr(r0, &(0x7f0000000e00)={0xfffffffffffffffc, 0x9, 0xffffffffffffffc0}, &(0x7f0000000e40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000ec0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfee7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008040}, 0x10) 23:38:57 executing program 7: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x23f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20060000}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048080) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff0000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x84}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80881}, 0x4000094) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x180, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a0cc5555414e7258e253f2fcf34d9eccd33da41fe8c7c617d870e0b50114a3c5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "26d5be0b5804d277b22cb6b92882da0a563af9f786f5b29f2c3a16549d22c8f2"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1432}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5510aad8346ab76ed5cf63748b2fa465ca4ea7b57850b0039c888e306b583bc5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a59534c45aeffa21c2428581b8b52e9a97051450871345d980f25f08b5f4da8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d41bcf57c44ff86a314256e1ca38b338"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "43b968fbc81bacbed94e6eb59f86c1a9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e736198dbf3787a875c837a6be74abb5046eb2dfc734f998879fdb22e97525d1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "045f1cc47677196c05f1467368d2171cfc19dc9c659656c359430197beb9aae3"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x220, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x344e8e93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48d0b8ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x540099da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143e31e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd06d585}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d7fd3c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdff81a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f09a08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dbddeb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xee34712}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50203227}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afe9d22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d3ac2a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79287cfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40195295}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2867924e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e460720}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bbc897}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65ec8628}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65bbb586}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d31e95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21eba8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59e68edd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd9c44f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefa8d96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x560799b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd8dbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe49da13}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) [ 58.236277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.238545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.240194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.243348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.245267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.246603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.251585] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.279503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.291028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.292506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.293683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.296143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.297235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.298435] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.307645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.310089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.314414] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.314436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.318841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.320519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.322206] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.323627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.328223] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.335487] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.360058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.361899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.363273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.365325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.366675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.367741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.369336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.370466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.371533] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.376498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.376647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.380156] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.380294] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.382707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.388336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.389333] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.405090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.419444] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.421222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.425113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.434927] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.482131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.485737] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.488669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.497025] Bluetooth: hci7: HCI_REQ-0x0c1a [ 60.314191] Bluetooth: hci0: command 0x0409 tx timeout [ 60.377909] Bluetooth: hci2: command 0x0409 tx timeout [ 60.377930] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 60.442240] Bluetooth: hci6: command 0x0409 tx timeout [ 60.442751] Bluetooth: hci4: command 0x0409 tx timeout [ 60.443237] Bluetooth: hci1: command 0x0409 tx timeout [ 60.506401] Bluetooth: hci3: command 0x0409 tx timeout [ 60.570877] Bluetooth: hci7: command 0x0409 tx timeout [ 62.363059] Bluetooth: hci0: command 0x041b tx timeout [ 62.426954] Bluetooth: hci2: command 0x041b tx timeout [ 62.489982] Bluetooth: hci1: command 0x041b tx timeout [ 62.490897] Bluetooth: hci4: command 0x041b tx timeout [ 62.491711] Bluetooth: hci6: command 0x041b tx timeout [ 62.553946] Bluetooth: hci3: command 0x041b tx timeout [ 62.617900] Bluetooth: hci7: command 0x041b tx timeout [ 62.943621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.015263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.027085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.050046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.052675] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.055537] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.063974] Bluetooth: hci5: HCI_REQ-0x0c1a [ 64.409934] Bluetooth: hci0: command 0x040f tx timeout [ 64.473952] Bluetooth: hci2: command 0x040f tx timeout [ 64.537896] Bluetooth: hci6: command 0x040f tx timeout [ 64.538356] Bluetooth: hci4: command 0x040f tx timeout [ 64.538754] Bluetooth: hci1: command 0x040f tx timeout [ 64.602348] Bluetooth: hci3: command 0x040f tx timeout [ 64.665858] Bluetooth: hci7: command 0x040f tx timeout [ 65.113887] Bluetooth: hci5: command 0x0409 tx timeout [ 66.457901] Bluetooth: hci0: command 0x0419 tx timeout [ 66.521878] Bluetooth: hci2: command 0x0419 tx timeout [ 66.585934] Bluetooth: hci1: command 0x0419 tx timeout [ 66.586365] Bluetooth: hci4: command 0x0419 tx timeout [ 66.586721] Bluetooth: hci6: command 0x0419 tx timeout [ 66.649954] Bluetooth: hci3: command 0x0419 tx timeout [ 66.713869] Bluetooth: hci7: command 0x0419 tx timeout [ 67.161908] Bluetooth: hci5: command 0x041b tx timeout [ 69.209881] Bluetooth: hci5: command 0x040f tx timeout [ 71.257874] Bluetooth: hci5: command 0x0419 tx timeout 23:39:55 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000740)={r4, 0x8001, 0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000780)="9a26fe9b32a952901f62c0bb1017e051", 0x10) 23:39:55 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000740)={r4, 0x8001, 0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000780)="9a26fe9b32a952901f62c0bb1017e051", 0x10) 23:39:55 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000740)={r4, 0x8001, 0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000780)="9a26fe9b32a952901f62c0bb1017e051", 0x10) 23:39:56 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000740)={r4, 0x8001, 0x1}) 23:39:56 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)) 23:39:56 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0x0, 0xfff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) 23:39:56 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) 23:39:56 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) [ 118.130676] syz-executor.6 (296) used greatest stack depth: 24776 bytes left [ 120.040869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.052153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.054402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.057230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.058921] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.060269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.064479] Bluetooth: hci1: HCI_REQ-0x0c1a [ 121.817892] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 122.073900] Bluetooth: hci1: command 0x0409 tx timeout [ 122.137869] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 122.329888] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 122.393858] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 122.457874] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 124.082309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.085467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.086721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.091133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.093233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.094769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.098626] Bluetooth: hci0: HCI_REQ-0x0c1a [ 124.121881] Bluetooth: hci1: command 0x041b tx timeout [ 124.513526] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.516226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.519164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.522455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.524679] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.526221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.533546] Bluetooth: hci3: HCI_REQ-0x0c1a [ 124.590315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.599102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.600386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.603913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.612705] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 124.614678] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.619977] Bluetooth: hci6: HCI_REQ-0x0c1a [ 124.704762] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.706753] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.721004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.733239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.746653] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 124.747991] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.762994] Bluetooth: hci7: HCI_REQ-0x0c1a [ 126.105928] Bluetooth: hci0: command 0x0409 tx timeout [ 126.169933] Bluetooth: hci1: command 0x040f tx timeout [ 126.425958] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 126.553886] Bluetooth: hci3: command 0x0409 tx timeout [ 126.681936] Bluetooth: hci6: command 0x0409 tx timeout [ 126.809893] Bluetooth: hci7: command 0x0409 tx timeout [ 128.154012] Bluetooth: hci0: command 0x041b tx timeout [ 128.217871] Bluetooth: hci1: command 0x0419 tx timeout [ 128.601861] Bluetooth: hci3: command 0x041b tx timeout [ 128.729861] Bluetooth: hci6: command 0x041b tx timeout [ 128.797514] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.798729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.801918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.804441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.805693] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.807402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.811308] Bluetooth: hci2: HCI_REQ-0x0c1a [ 128.857892] Bluetooth: hci7: command 0x041b tx timeout [ 130.201928] Bluetooth: hci0: command 0x040f tx timeout [ 130.650881] Bluetooth: hci3: command 0x040f tx timeout [ 130.777898] Bluetooth: hci6: command 0x040f tx timeout [ 130.841934] Bluetooth: hci2: command 0x0409 tx timeout [ 130.905852] Bluetooth: hci7: command 0x040f tx timeout [ 132.249861] Bluetooth: hci0: command 0x0419 tx timeout [ 132.697853] Bluetooth: hci3: command 0x0419 tx timeout [ 132.825928] Bluetooth: hci6: command 0x0419 tx timeout [ 132.889852] Bluetooth: hci2: command 0x041b tx timeout [ 132.953849] Bluetooth: hci7: command 0x0419 tx timeout [ 134.937863] Bluetooth: hci2: command 0x040f tx timeout [ 136.985906] Bluetooth: hci2: command 0x0419 tx timeout 23:41:00 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa2080200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x4044000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000002c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r5) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x20a, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000540)=0x8130, 0x4) syz_io_uring_setup(0xf8f, &(0x7f0000000580)={0x0, 0xccb7, 0x4, 0x1, 0x1bf, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000780)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd=r5, 0x9, &(0x7f0000000680)="040b5fe9a78bcda48483b1133adf05fd79504c994f75d8ecafe19780273153d1c09b1ef7360651439eecb60112b61734ca137244c234dd6f14d4225c6a02d51ba44766c471590b70f17f230ea3e7040c5a23be2ae728be71abff018b4ae5960ce148590b08a9f5fc79ca37a73ed111c4bcb6dc4e13fb99ad380655bbdc6bbf2acd659ed1a3f6ad7a87e2503b72d0f76a0be3bc17e181d82b83ec0f9ff4a9c2203ce8b167f3fd975065933d4a7a33aafba1c4ec66592667a7afaed61affa764b99908a407ceb23dc0", 0xc8}, 0xffffffc0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000007c0)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010009}, 0x4) 23:41:00 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x409f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40086) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10040}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xdc77f21856ef6688}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfe83ac0ee5b23054}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x24000080) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x200900, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r5) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000040}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x5) 23:41:00 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x8000, 0x7fffffff, 0xb7, 0xfff, 0xff, 0x5b, 0x1}) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x31, 0x8, 0xa, 0xd, 0x0, 0x2, 0x2, 0x6c, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x13dc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x7, 0x69, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x700, 0x8000, 0x2, 0xcdd}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000280)={r3, r4+10000000}, &(0x7f00000002c0)={[0x1]}, 0x8) r5 = syz_open_dev$rtc(&(0x7f0000000300), 0x1, 0x400000) ioctl$RTC_UIE_OFF(r5, 0x7004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x1, 0x6, 0x4, 0x3, 0x17, 0x1, {0x2}}, 0x7) r6 = eventfd(0x40) r7 = syz_open_dev$rtc(&(0x7f0000000380), 0x4e, 0x280200) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000003c0)={0x23, 0x6, 0x13, 0x17, 0x8, 0x0, 0x6, 0xc0}) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000400)={0x10000003}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000004c0)=r0, 0x1) 23:41:00 executing program 6: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffc00}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x131502, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe0000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ad}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x68}}, 0x20000010) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xccc}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x20000800) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1fc, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x1d8, 0x8, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1fc}}, 0x20008001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2007, @fd_index=0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x3) mq_timedreceive(r0, &(0x7f0000000740)=""/173, 0xad, 0x9, &(0x7f0000000800)={0x77359400}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x3c}}, 0x800) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x410, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4085) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004880}, 0x800) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000d00)=""/94, 0x5e, 0x8, &(0x7f0000000dc0)={r3, r4+10000000}) mq_getsetattr(r0, &(0x7f0000000e00)={0xfffffffffffffffc, 0x9, 0xffffffffffffffc0}, &(0x7f0000000e40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000ec0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfee7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008040}, 0x10) 23:41:00 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2008000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@cache_fscache}], [{@subj_user={'subj_user', 0x3d, '\'#'}}, {@smackfsdef={'smackfsdef', 0x3d, '&//!!-'}}]}}) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r1 = mq_open(&(0x7f0000000200)='\'#', 0x0, 0x20, &(0x7f0000000240)={0x0, 0x400000000000, 0x40000000000000, 0x1}) mq_getsetattr(r1, &(0x7f0000000280)={0x4, 0x5, 0x6, 0xb42}, &(0x7f00000002c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="2774ccd152790b56a070eb5d9760a7ab", 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$vga_arbiter(r3, &(0x7f00000003c0)=@target={'target ', {'PCI:', '0', ':', '12', ':', '5', '.', '15'}}, 0x15) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='cubic\x00', 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000440)={0x0, 0x0, r3, 0x10000, 0x80000}) r4 = inotify_init() mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xa4c001, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@privport}, {@msize={'msize', 0x3d, 0x6}}, {@version_u}, {@nodevmap}, {@posixacl}, {@access_uid}, {@loose}, {@version_9p2000}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'rfdno'}}, {@obj_role={'obj_role', 0x3d, '.'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq}, {@uid_lt}]}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r5 = inotify_add_watch(r2, &(0x7f00000006c0)='./file1\x00', 0x80) inotify_rm_watch(r3, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000700)="05d84a79d76310ddb9604edd5f44592a", 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r2) inotify_add_watch(r4, &(0x7f0000000780)='./file1\x00', 0x10000008) 23:41:00 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0xc0000) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x9, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xffffffff, 0x4, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x9}, 0x4080844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r1) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x1200]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000) socketpair(0x29, 0x800, 0x6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r6) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000004c0)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000500)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000540)) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1777) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcc}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) 23:41:00 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) 23:41:00 executing program 7: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x23f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20060000}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048080) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff0000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x84}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80881}, 0x4000094) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x180, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a0cc5555414e7258e253f2fcf34d9eccd33da41fe8c7c617d870e0b50114a3c5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "26d5be0b5804d277b22cb6b92882da0a563af9f786f5b29f2c3a16549d22c8f2"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1432}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5510aad8346ab76ed5cf63748b2fa465ca4ea7b57850b0039c888e306b583bc5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a59534c45aeffa21c2428581b8b52e9a97051450871345d980f25f08b5f4da8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d41bcf57c44ff86a314256e1ca38b338"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "43b968fbc81bacbed94e6eb59f86c1a9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e736198dbf3787a875c837a6be74abb5046eb2dfc734f998879fdb22e97525d1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "045f1cc47677196c05f1467368d2171cfc19dc9c659656c359430197beb9aae3"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x220, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x344e8e93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48d0b8ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x540099da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143e31e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd06d585}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d7fd3c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdff81a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f09a08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dbddeb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xee34712}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50203227}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afe9d22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d3ac2a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79287cfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40195295}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2867924e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e460720}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bbc897}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65ec8628}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65bbb586}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d31e95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21eba8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59e68edd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd9c44f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefa8d96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x560799b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd8dbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe49da13}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 23:41:00 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) 23:41:00 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) 23:41:01 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2008000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@cache_fscache}], [{@subj_user={'subj_user', 0x3d, '\'#'}}, {@smackfsdef={'smackfsdef', 0x3d, '&//!!-'}}]}}) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r1 = mq_open(&(0x7f0000000200)='\'#', 0x0, 0x20, &(0x7f0000000240)={0x0, 0x400000000000, 0x40000000000000, 0x1}) mq_getsetattr(r1, &(0x7f0000000280)={0x4, 0x5, 0x6, 0xb42}, &(0x7f00000002c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="2774ccd152790b56a070eb5d9760a7ab", 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$vga_arbiter(r3, &(0x7f00000003c0)=@target={'target ', {'PCI:', '0', ':', '12', ':', '5', '.', '15'}}, 0x15) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='cubic\x00', 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000440)={0x0, 0x0, r3, 0x10000, 0x80000}) r4 = inotify_init() mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xa4c001, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@privport}, {@msize={'msize', 0x3d, 0x6}}, {@version_u}, {@nodevmap}, {@posixacl}, {@access_uid}, {@loose}, {@version_9p2000}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'rfdno'}}, {@obj_role={'obj_role', 0x3d, '.'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq}, {@uid_lt}]}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r5 = inotify_add_watch(r2, &(0x7f00000006c0)='./file1\x00', 0x80) inotify_rm_watch(r3, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000700)="05d84a79d76310ddb9604edd5f44592a", 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r2) inotify_add_watch(r4, &(0x7f0000000780)='./file1\x00', 0x10000008) 23:41:01 executing program 7: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x23f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20060000}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048080) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff0000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x84}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80881}, 0x4000094) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x180, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a0cc5555414e7258e253f2fcf34d9eccd33da41fe8c7c617d870e0b50114a3c5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "26d5be0b5804d277b22cb6b92882da0a563af9f786f5b29f2c3a16549d22c8f2"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1432}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5510aad8346ab76ed5cf63748b2fa465ca4ea7b57850b0039c888e306b583bc5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a59534c45aeffa21c2428581b8b52e9a97051450871345d980f25f08b5f4da8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d41bcf57c44ff86a314256e1ca38b338"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "43b968fbc81bacbed94e6eb59f86c1a9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e736198dbf3787a875c837a6be74abb5046eb2dfc734f998879fdb22e97525d1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "045f1cc47677196c05f1467368d2171cfc19dc9c659656c359430197beb9aae3"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x220, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x344e8e93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48d0b8ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x540099da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143e31e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd06d585}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d7fd3c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdff81a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f09a08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dbddeb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xee34712}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50203227}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afe9d22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d3ac2a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79287cfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40195295}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2867924e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e460720}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bbc897}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65ec8628}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65bbb586}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d31e95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21eba8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59e68edd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd9c44f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefa8d96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x560799b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd8dbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe49da13}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 23:41:01 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x409f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40086) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10040}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xdc77f21856ef6688}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfe83ac0ee5b23054}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x24000080) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x200900, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r5) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000040}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x5) 23:41:01 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/113, 0x71, 0xde3, &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)={0x10}) r1 = syz_io_uring_setup(0x5e0a, &(0x7f0000000180)={0x0, 0x5bf1, 0x0, 0x3, 0x71}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r1, 0x0) r2 = io_uring_setup(0x2927, &(0x7f0000000280)={0x0, 0xf7c1, 0x8, 0x3, 0x128, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/156, &(0x7f00000003c0)=0x9c) syz_io_uring_setup(0x3753, &(0x7f0000000400)={0x0, 0xe3e, 0x8, 0x3, 0x196, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) semget$private(0x0, 0x2, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}, 0x0, 0x0, 0x29, 0x0, "3ecda44e964baecd8cc77fdd52bdf8dd12d2a32d03bd119faed08d35a3b6fdcbdc35aaaf3e1dcc38f27854577be3c2a72e1104fcb2091411590945f60b67e82235dc6b44bce7889da6f2fcd0cb56997d"}, 0xd8) [ 183.705979] Bluetooth: hci4: command 0x0406 tx timeout [ 184.217961] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 184.219078] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.219900] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.221028] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 184.222986] Call Trace: [ 184.223777] [ 184.224172] __schedule+0x893/0x2470 [ 184.224754] ? io_schedule_timeout+0x150/0x150 [ 184.225467] ? do_raw_spin_lock+0x121/0x260 [ 184.226158] ? rwlock_bug.part.0+0x90/0x90 [ 184.226832] schedule+0xda/0x1b0 [ 184.227356] rescuer_thread+0x851/0xdb0 [ 184.227992] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.228718] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.229470] ? lockdep_hardirqs_on+0x79/0x100 [ 184.230187] ? worker_thread+0x1260/0x1260 [ 184.230834] kthread+0x2ed/0x3a0 [ 184.231350] ? kthread_complete_and_exit+0x40/0x40 [ 184.232109] ret_from_fork+0x22/0x30 [ 184.232697] [ 184.233078] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 184.234044] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.234839] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.235956] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 184.237182] Call Trace: [ 184.237566] [ 184.237955] __schedule+0x893/0x2470 [ 184.238528] ? io_schedule_timeout+0x150/0x150 [ 184.239231] ? do_raw_spin_lock+0x121/0x260 [ 184.239900] ? rwlock_bug.part.0+0x90/0x90 [ 184.240542] schedule+0xda/0x1b0 [ 184.241092] rescuer_thread+0x851/0xdb0 [ 184.241698] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.242455] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.243217] ? lockdep_hardirqs_on+0x79/0x100 [ 184.243899] ? worker_thread+0x1260/0x1260 [ 184.244535] kthread+0x2ed/0x3a0 [ 184.245081] ? kthread_complete_and_exit+0x40/0x40 [ 184.245844] ret_from_fork+0x22/0x30 [ 184.246436] [ 184.246820] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 184.247756] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.248561] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.249683] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 184.250904] Call Trace: [ 184.251292] [ 184.251641] __schedule+0x893/0x2470 [ 184.252236] ? io_schedule_timeout+0x150/0x150 [ 184.252937] ? do_raw_spin_lock+0x121/0x260 [ 184.253589] ? rwlock_bug.part.0+0x90/0x90 [ 184.254257] schedule+0xda/0x1b0 [ 184.254776] rescuer_thread+0x851/0xdb0 [ 184.255403] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.256162] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.256931] ? lockdep_hardirqs_on+0x79/0x100 [ 184.257584] ? worker_thread+0x1260/0x1260 [ 184.258258] kthread+0x2ed/0x3a0 [ 184.258775] ? kthread_complete_and_exit+0x40/0x40 [ 184.259535] ret_from_fork+0x22/0x30 [ 184.260132] [ 184.260488] INFO: task netns:6 blocked for more than 143 seconds. [ 184.261390] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.262207] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.263331] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 184.264544] Call Trace: [ 184.264939] [ 184.265278] __schedule+0x893/0x2470 [ 184.265896] ? io_schedule_timeout+0x150/0x150 [ 184.266594] ? do_raw_spin_lock+0x121/0x260 [ 184.267243] ? rwlock_bug.part.0+0x90/0x90 [ 184.267928] schedule+0xda/0x1b0 [ 184.268448] rescuer_thread+0x851/0xdb0 [ 184.269062] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.269863] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.270612] ? lockdep_hardirqs_on+0x79/0x100 [ 184.271352] ? worker_thread+0x1260/0x1260 [ 184.272029] kthread+0x2ed/0x3a0 [ 184.272547] ? kthread_complete_and_exit+0x40/0x40 [ 184.273312] ret_from_fork+0x22/0x30 [ 184.273945] [ 184.274302] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 184.275313] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.276119] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.277259] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 184.278488] Workqueue: 0x0 (kblockd) [ 184.279115] Call Trace: [ 184.279503] [ 184.279872] __schedule+0x893/0x2470 [ 184.280453] ? io_schedule_timeout+0x150/0x150 [ 184.281193] schedule+0xda/0x1b0 [ 184.281707] worker_thread+0x15f/0x1260 [ 184.282386] ? process_one_work+0x16a0/0x16a0 [ 184.283106] kthread+0x2ed/0x3a0 [ 184.283629] ? kthread_complete_and_exit+0x40/0x40 [ 184.284410] ret_from_fork+0x22/0x30 [ 184.285038] [ 184.285399] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 184.286404] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.287220] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.288376] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 184.289618] Call Trace: [ 184.290045] [ 184.290397] __schedule+0x893/0x2470 [ 184.291014] ? io_schedule_timeout+0x150/0x150 [ 184.291702] ? do_raw_spin_lock+0x121/0x260 [ 184.292393] ? rwlock_bug.part.0+0x90/0x90 [ 184.293081] schedule+0xda/0x1b0 [ 184.293604] rescuer_thread+0x851/0xdb0 [ 184.294260] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.295046] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.295788] ? lockdep_hardirqs_on+0x79/0x100 [ 184.296502] ? worker_thread+0x1260/0x1260 [ 184.297176] kthread+0x2ed/0x3a0 [ 184.297699] ? kthread_complete_and_exit+0x40/0x40 [ 184.298478] ret_from_fork+0x22/0x30 [ 184.299103] [ 184.299457] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 184.300536] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.301368] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.302545] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 184.303824] Call Trace: [ 184.304219] [ 184.304579] __schedule+0x893/0x2470 [ 184.305199] ? io_schedule_timeout+0x150/0x150 [ 184.305929] ? mark_held_locks+0x9e/0xe0 [ 184.306565] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.307369] schedule+0xda/0x1b0 [ 184.307936] rcu_tasks_one_gp+0x3db/0xc10 [ 184.308611] rcu_tasks_kthread+0x80/0xa0 [ 184.309269] ? rcu_tasks_postscan+0x10/0x10 [ 184.309985] kthread+0x2ed/0x3a0 [ 184.310516] ? kthread_complete_and_exit+0x40/0x40 [ 184.311302] ret_from_fork+0x22/0x30 [ 184.311961] [ 184.312328] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 184.313355] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.314190] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.315352] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 184.316624] Workqueue: 0x0 (events_highpri) [ 184.317342] Call Trace: [ 184.317736] [ 184.318133] __schedule+0x893/0x2470 [ 184.318731] ? io_schedule_timeout+0x150/0x150 [ 184.319477] schedule+0xda/0x1b0 [ 184.320045] worker_thread+0x15f/0x1260 [ 184.320682] ? process_one_work+0x16a0/0x16a0 [ 184.321414] kthread+0x2ed/0x3a0 [ 184.322004] ? kthread_complete_and_exit+0x40/0x40 [ 184.322756] ret_from_fork+0x22/0x30 [ 184.323393] [ 184.323759] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 184.324823] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.325614] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.326814] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 184.328085] Call Trace: [ 184.328480] [ 184.328871] __schedule+0x893/0x2470 [ 184.329466] ? io_schedule_timeout+0x150/0x150 [ 184.330201] ? do_raw_spin_lock+0x121/0x260 [ 184.330895] ? rwlock_bug.part.0+0x90/0x90 [ 184.331558] schedule+0xda/0x1b0 [ 184.332119] rescuer_thread+0x851/0xdb0 [ 184.332736] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.333529] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.334325] ? lockdep_hardirqs_on+0x79/0x100 [ 184.335048] ? worker_thread+0x1260/0x1260 [ 184.335707] kthread+0x2ed/0x3a0 [ 184.336271] ? kthread_complete_and_exit+0x40/0x40 [ 184.337056] ret_from_fork+0x22/0x30 [ 184.337651] [ 184.338060] INFO: task kblockd:30 blocked for more than 143 seconds. [ 184.339035] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.339866] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.341029] task:kblockd state:I stack:30176 pid:30 ppid:2 flags:0x00004000 [ 184.342312] Call Trace: [ 184.342696] [ 184.343096] __schedule+0x893/0x2470 [ 184.343686] ? io_schedule_timeout+0x150/0x150 [ 184.344419] ? do_raw_spin_lock+0x121/0x260 [ 184.345120] ? rwlock_bug.part.0+0x90/0x90 [ 184.345824] schedule+0xda/0x1b0 [ 184.346362] rescuer_thread+0x851/0xdb0 [ 184.347013] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.347770] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.348578] ? lockdep_hardirqs_on+0x79/0x100 [ 184.349300] ? worker_thread+0x1260/0x1260 [ 184.349987] kthread+0x2ed/0x3a0 [ 184.350517] ? kthread_complete_and_exit+0x40/0x40 [ 184.351299] ret_from_fork+0x22/0x30 [ 184.351932] [ 184.352362] [ 184.352362] Showing all locks held in the system: [ 184.353308] 1 lock held by rcu_tasks_kthre/11: [ 184.354022] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 184.355511] 1 lock held by khungtaskd/25: [ 184.356148] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 184.357530] 2 locks held by in:imklog/188: [ 184.358206] 2 locks held by syz-executor/6760: [ 184.358908] [ 184.359204] ============================================= [ 184.359204] [ 187.802068] Bluetooth: hci5: command 0x0406 tx timeout VM DIAGNOSIS: 23:41:04 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85407260 RDI=ffff8880372f89c8 RBP=ffffffff85407260 RSP=ffff888028fbf948 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001 R12=ffff8880372f8000 R13=ffff8880372f8978 R14=00000000ffffffff R15=ffff8880372f89c8 RIP=ffffffff8425358e RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555675d400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff565f8080 CR3=0000000017428000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff000000000000 ff00000000000000 YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc0994b29c0 CR3=000000000ee48000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 41e7578d9e7abc8d 514f566a9cd27e19 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 0000000000122988 YMM04=0000000000000000 0000000000000000 3ad68c26cc5951ca 000000000013bf28 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 8415495e735cc95d 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000