Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15365' (ECDSA) to the list of known hosts. 2022/10/03 21:05:24 fuzzer started 2022/10/03 21:05:24 dialing manager at localhost:35095 syzkaller login: [ 37.582190] cgroup: Unknown subsys name 'net' [ 37.633310] cgroup: Unknown subsys name 'rlimit' 2022/10/03 21:05:41 syscalls: 211 2022/10/03 21:05:41 code coverage: enabled 2022/10/03 21:05:41 comparison tracing: enabled 2022/10/03 21:05:41 extra coverage: enabled 2022/10/03 21:05:41 setuid sandbox: enabled 2022/10/03 21:05:41 namespace sandbox: enabled 2022/10/03 21:05:41 Android sandbox: enabled 2022/10/03 21:05:41 fault injection: enabled 2022/10/03 21:05:41 leak checking: enabled 2022/10/03 21:05:41 net packet injection: enabled 2022/10/03 21:05:41 net device setup: enabled 2022/10/03 21:05:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 21:05:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 21:05:41 USB emulation: enabled 2022/10/03 21:05:41 hci packet injection: enabled 2022/10/03 21:05:41 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 21:05:41 802.15.4 emulation: enabled 2022/10/03 21:05:41 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 21:05:42 starting 8 fuzzer processes 21:05:42 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000c80)=@buf={0x38, &(0x7f0000000c40)="9e781f8a1310755a9ab469b516dcd47516add89e8e0626a39339c0d541235a70cb407b8ece83d5229572bab4bb40d75b176e683d98be97ee"}) clock_getres(0x0, &(0x7f0000000cc0)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0) 21:05:42 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) 21:05:42 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000002200)={&(0x7f0000001ec0), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40040c0) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:05:42 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000280)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r6, 0x5, 0x1, 0x2) r7 = socket(0x2a, 0x5, 0x4) fstatfs(r7, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r9 = gettid() r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = accept(r4, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x80) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r9, 0x7, r10, &(0x7f0000000640)={r1, r11, 0x4}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) [ 54.946196] audit: type=1400 audit(1664831142.835:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:05:42 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6e7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x8084) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x64, 0x2, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfb0}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x18c}]}, 0x64}}, 0x4000800) 21:05:42 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) fstatfs(r0, &(0x7f00000006c0)=""/63) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x57bf, &(0x7f0000000740)={0x0, 0x937, 0x0, 0x1, 0x227, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:05:42 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r9 = accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xa0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x28000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbc93}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x40004c0) fstatfs(r9, &(0x7f00000025c0)) 21:05:42 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fstatfs(r4, &(0x7f0000000f40)=""/106) getsockname(r3, &(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000001040)=0x80) fsetxattr$security_evm(r9, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3121}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x548f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006000}, 0x814) [ 56.231657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.234505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.235930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.240717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.253072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.254400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.260593] Bluetooth: hci0: HCI_REQ-0x0c1a [ 56.291593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.294971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.296825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.300794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.306541] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.308132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.313490] Bluetooth: hci1: HCI_REQ-0x0c1a [ 56.350739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.352827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.354242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.355726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.357098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.359787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.361697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.364094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.365511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.366742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.368593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.375091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.379673] Bluetooth: hci3: HCI_REQ-0x0c1a [ 56.385787] Bluetooth: hci2: HCI_REQ-0x0c1a [ 56.448609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.452182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.456095] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.472187] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.473396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.474448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.482117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.483425] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.485541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.499201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.501908] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.504935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.506687] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 56.508786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 56.518434] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 56.518600] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.522031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 56.523679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.525090] Bluetooth: hci7: HCI_REQ-0x0c1a [ 56.537740] Bluetooth: hci6: HCI_REQ-0x0c1a [ 56.541218] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.314525] Bluetooth: hci0: command 0x0409 tx timeout [ 58.378937] Bluetooth: hci1: command 0x0409 tx timeout [ 58.442936] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 58.444405] Bluetooth: hci2: command 0x0409 tx timeout [ 58.445022] Bluetooth: hci3: command 0x0409 tx timeout [ 58.570014] Bluetooth: hci6: command 0x0409 tx timeout [ 58.570757] Bluetooth: hci7: command 0x0409 tx timeout [ 58.634934] Bluetooth: hci4: command 0x0409 tx timeout [ 60.362613] Bluetooth: hci0: command 0x041b tx timeout [ 60.425966] Bluetooth: hci1: command 0x041b tx timeout [ 60.490917] Bluetooth: hci3: command 0x041b tx timeout [ 60.491391] Bluetooth: hci2: command 0x041b tx timeout [ 60.617922] Bluetooth: hci7: command 0x041b tx timeout [ 60.618412] Bluetooth: hci6: command 0x041b tx timeout [ 60.682940] Bluetooth: hci4: command 0x041b tx timeout [ 62.410895] Bluetooth: hci0: command 0x040f tx timeout [ 62.474884] Bluetooth: hci1: command 0x040f tx timeout [ 62.538945] Bluetooth: hci2: command 0x040f tx timeout [ 62.538977] Bluetooth: hci3: command 0x040f tx timeout [ 62.665941] Bluetooth: hci6: command 0x040f tx timeout [ 62.666670] Bluetooth: hci7: command 0x040f tx timeout [ 62.730907] Bluetooth: hci4: command 0x040f tx timeout [ 63.562906] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 64.458934] Bluetooth: hci0: command 0x0419 tx timeout [ 64.523001] Bluetooth: hci1: command 0x0419 tx timeout [ 64.585956] Bluetooth: hci3: command 0x0419 tx timeout [ 64.587190] Bluetooth: hci2: command 0x0419 tx timeout [ 64.713931] Bluetooth: hci7: command 0x0419 tx timeout [ 64.714011] Bluetooth: hci6: command 0x0419 tx timeout [ 64.777945] Bluetooth: hci4: command 0x0419 tx timeout [ 66.092609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.099375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.109270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.138081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.145710] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.155529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.186262] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.234007] Bluetooth: hci5: command 0x0409 tx timeout [ 70.281976] Bluetooth: hci5: command 0x041b tx timeout [ 72.329900] Bluetooth: hci5: command 0x040f tx timeout [ 74.377917] Bluetooth: hci5: command 0x0419 tx timeout 21:06:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000280)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r6, 0x5, 0x1, 0x2) r7 = socket(0x2a, 0x5, 0x4) fstatfs(r7, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r9 = gettid() r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = accept(r4, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x80) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r9, 0x7, r10, &(0x7f0000000640)={r1, r11, 0x4}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:06:56 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000c80)=@buf={0x38, &(0x7f0000000c40)="9e781f8a1310755a9ab469b516dcd47516add89e8e0626a39339c0d541235a70cb407b8ece83d5229572bab4bb40d75b176e683d98be97ee"}) clock_getres(0x0, &(0x7f0000000cc0)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0) 21:06:56 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fstatfs(r4, &(0x7f0000000f40)=""/106) getsockname(r3, &(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000001040)=0x80) fsetxattr$security_evm(r9, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3121}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x548f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006000}, 0x814) 21:06:56 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) fstatfs(r0, &(0x7f00000006c0)=""/63) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x57bf, &(0x7f0000000740)={0x0, 0x937, 0x0, 0x1, 0x227, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:06:56 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000002200)={&(0x7f0000001ec0), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40040c0) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:06:56 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6e7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x8084) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x64, 0x2, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfb0}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x18c}]}, 0x64}}, 0x4000800) 21:06:56 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r9 = accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xa0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x28000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbc93}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x40004c0) fstatfs(r9, &(0x7f00000025c0)) 21:06:56 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) 21:06:56 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) fstatfs(r0, &(0x7f00000006c0)=""/63) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x57bf, &(0x7f0000000740)={0x0, 0x937, 0x0, 0x1, 0x227, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:06:57 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6e7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x8084) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x64, 0x2, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfb0}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x18c}]}, 0x64}}, 0x4000800) 21:06:57 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000002200)={&(0x7f0000001ec0), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40040c0) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:06:57 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fstatfs(r4, &(0x7f0000000f40)=""/106) getsockname(r3, &(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000001040)=0x80) fsetxattr$security_evm(r9, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3121}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x548f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006000}, 0x814) 21:06:57 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r9 = accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xa0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x28000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbc93}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x40004c0) fstatfs(r9, &(0x7f00000025c0)) 21:06:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000280)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r6, 0x5, 0x1, 0x2) r7 = socket(0x2a, 0x5, 0x4) fstatfs(r7, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r9 = gettid() r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = accept(r4, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x80) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r9, 0x7, r10, &(0x7f0000000640)={r1, r11, 0x4}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:06:57 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) 21:07:08 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) fstatfs(r0, &(0x7f00000006c0)=""/63) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x57bf, &(0x7f0000000740)={0x0, 0x937, 0x0, 0x1, 0x227, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:08 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r9 = accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xa0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x28000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbc93}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x40004c0) fstatfs(r9, &(0x7f00000025c0)) 21:07:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000280)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r6, 0x5, 0x1, 0x2) r7 = socket(0x2a, 0x5, 0x4) fstatfs(r7, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r9 = gettid() r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = accept(r4, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x80) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r9, 0x7, r10, &(0x7f0000000640)={r1, r11, 0x4}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:08 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000002200)={&(0x7f0000001ec0), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40040c0) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:07:08 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000c80)=@buf={0x38, &(0x7f0000000c40)="9e781f8a1310755a9ab469b516dcd47516add89e8e0626a39339c0d541235a70cb407b8ece83d5229572bab4bb40d75b176e683d98be97ee"}) clock_getres(0x0, &(0x7f0000000cc0)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0) 21:07:08 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fstatfs(r4, &(0x7f0000000f40)=""/106) getsockname(r3, &(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000001040)=0x80) fsetxattr$security_evm(r9, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3121}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x548f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006000}, 0x814) 21:07:08 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6e7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x8084) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x64, 0x2, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfb0}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x18c}]}, 0x64}}, 0x4000800) 21:07:08 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) 21:07:09 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6e7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x8084) 21:07:09 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) fstatfs(r0, &(0x7f00000006c0)=""/63) pipe2(&(0x7f0000000700), 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:09 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fstatfs(r4, &(0x7f0000000f40)=""/106) getsockname(r3, &(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000001040)=0x80) fsetxattr$security_evm(r9, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) 21:07:09 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r9 = accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xa0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x28000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbc93}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x40004c0) 21:07:09 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) 21:07:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000280)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r5, 0x5, 0x1, 0x2) r6 = socket(0x2a, 0x5, 0x4) fstatfs(r6, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r7) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) accept(r3, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x80) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:21 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000c80)=@buf={0x38, &(0x7f0000000c40)="9e781f8a1310755a9ab469b516dcd47516add89e8e0626a39339c0d541235a70cb407b8ece83d5229572bab4bb40d75b176e683d98be97ee"}) clock_getres(0x0, &(0x7f0000000cc0)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0) 21:07:21 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) fstatfs(r0, &(0x7f00000006c0)=""/63) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:21 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) 21:07:21 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fstatfs(r4, &(0x7f0000000f40)=""/106) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) 21:07:21 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6e7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x800) 21:07:21 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) 21:07:21 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:21 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:07:21 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r6, 0x1000, {0x0, r1}, 0x4b0, 0x5, 0x1, {0x0, 0x0, r3}}, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:22 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r2, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40800) 21:07:22 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) gettid() write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:22 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r4) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) 21:07:22 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r2) 21:07:22 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff3c27}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ae4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) 21:07:22 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:07:22 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000c80)=@buf={0x38, &(0x7f0000000c40)="9e781f8a1310755a9ab469b516dcd47516add89e8e0626a39339c0d541235a70cb407b8ece83d5229572bab4bb40d75b176e683d98be97ee"}) clock_getres(0x0, &(0x7f0000000cc0)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) 21:07:22 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:22 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:23 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x8085) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) 21:07:23 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:34 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:07:34 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000c80)=@buf={0x38, &(0x7f0000000c40)="9e781f8a1310755a9ab469b516dcd47516add89e8e0626a39339c0d541235a70cb407b8ece83d5229572bab4bb40d75b176e683d98be97ee"}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) 21:07:34 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x22, 0x0, "87720723125e10055bdd6b499eedda1eb44e29358b3cf6491de73fbd96280a44907ffa815e1e32e6cbaaf8ff344d9826e67ed7666e70fd682a876e63d5394dba4d8d70ade4ff969c15e35de6bc7a2931"}, 0xd8) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) 21:07:34 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:34 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:34 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001e80)=@gcm_128={{0x304}, "f12367e0b6f3c990", "7d217a3aca311d10c1ad73f2fe1e4929", "6ae513f0", "68322d593d0ccd61"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:07:34 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) 21:07:34 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) 21:07:34 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:34 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:34 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:34 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) 21:07:34 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) 21:07:47 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/dev_mcast\x00') fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) 21:07:47 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) accept$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) 21:07:47 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:47 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400040, 0x0) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) 21:07:47 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008810}, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:07:47 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) epoll_pwait(r1, &(0x7f00000004c0)=[{}], 0x1, 0xffffffe0, &(0x7f0000000500)={[0x400]}, 0x8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:47 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:07:47 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, 0x0, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) 21:07:47 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r0, 0x10000000) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 179.530107] Bluetooth: hci1: command 0x0406 tx timeout [ 179.531016] Bluetooth: hci2: command 0x0406 tx timeout [ 179.531814] Bluetooth: hci0: command 0x0406 tx timeout [ 179.532618] Bluetooth: hci7: command 0x0406 tx timeout [ 179.533429] Bluetooth: hci3: command 0x0406 tx timeout [ 179.534213] Bluetooth: hci6: command 0x0406 tx timeout [ 179.534986] Bluetooth: hci4: command 0x0406 tx timeout 21:07:47 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) accept(r2, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:47 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a603bb941bab323}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0xc804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0) fadvise64(r4, 0x5, 0x1, 0x2) r5 = socket(0x2a, 0x5, 0x4) fstatfs(r5, &(0x7f0000000300)=""/83) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='dctcp\x00', 0x6) 21:07:47 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001f80)={0x0, 0x667, 0xb0000000}) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) 21:07:47 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) accept$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) 21:07:47 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x103, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x4000801) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x2, 0x1, [0xffff, 0x3ff, 0x7b, 0x8, 0xffffbbea, 0x400, 0xb1, 0x2, 0x80, 0xfffffffa, 0x0, 0x109, 0x4, 0x8001, 0x21ce, 0x8, 0x1, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0xbf, 0x1, 0x7fff, 0x5, 0x80000000, 0x3, 0xc7ba6d44, 0x80000001, 0xffffffff, 0x6, 0x101, 0x6, 0x3, 0x7fff, 0x10001, 0x0, 0x6, 0x8, 0x9, 0x3ff, 0x2, 0x9, 0x3c, 0x8, 0x5, 0x1ff, 0x6, 0x400, 0x9, 0x5, 0x92d7, 0x7, 0x200, 0x3, 0x7, 0x8, 0x5, 0xffffffff, 0xec0, 0x2be0, 0xd4], [0xdde, 0x8, 0x3, 0xc84, 0x157, 0x108, 0xfffffffa, 0x8a97, 0x8, 0x24, 0x9, 0x9, 0x6f3, 0xb7, 0x4, 0x7, 0x3, 0x5, 0x2, 0x200, 0x4, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0x8, 0xc26a0c1f, 0x400, 0x20, 0x7, 0x8001, 0x30, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x6, 0x7fffffff, 0x0, 0x3, 0x0, 0x4, 0x7f, 0x5, 0x4, 0x5dc, 0x4, 0x7, 0x8, 0x10000, 0x1ff, 0xbe8e, 0x80000000, 0x3, 0xe3e3, 0x8001, 0x0, 0x9], [0x2, 0x3, 0x1f, 0xbd, 0x9, 0x3, 0x0, 0x8001, 0x81, 0x5, 0x667f, 0x81, 0x5, 0x6552, 0x9, 0x800, 0x40, 0x7f, 0x80, 0x6, 0x6, 0xff, 0x0, 0xfffffffc, 0x7, 0x100, 0x9, 0xa85, 0x4, 0x3, 0x0, 0xfffff58e, 0x6, 0x8, 0x6, 0x20, 0x8, 0xffff0001, 0x6, 0xe0, 0xb4, 0x8b7a, 0x2, 0xffff, 0x0, 0x7, 0x1, 0x15d2, 0x8c5, 0x81, 0xff, 0xffffff57, 0x6, 0x8000, 0x3, 0x0, 0x7, 0x7, 0x0, 0x8, 0xffffff81, 0x3, 0x8, 0x81], [0x0, 0x80000000, 0x1f, 0x9d31, 0x0, 0x2, 0xffffffff, 0x0, 0x8000, 0x81, 0x5, 0xfffffff9, 0xb9, 0x3, 0x80, 0x4, 0x2, 0x3, 0x3, 0x80000000, 0x8, 0x67, 0x3, 0x1ff, 0xffff7aed, 0x0, 0x2, 0x9, 0x2, 0x100, 0x6d91, 0x0, 0xfff, 0xe3, 0x1, 0x650c, 0x1000, 0x6, 0x3, 0xffff0581, 0x8000, 0x8, 0x0, 0x8, 0x6c61, 0x2, 0x10001, 0x1, 0x4, 0x1f, 0x5, 0x80000001, 0x3ff, 0x2, 0x3, 0x7e84, 0x7, 0x9, 0xf1, 0x7, 0x7f, 0xc7, 0x3, 0x6], 0x14, ['\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x1) socketpair(0x2b, 0x1, 0xffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r0, 0x300, 0xffff, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x881) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=@sha1={0x1, "2e814eee30e786aaeffac35497a0702853a79f4d"}, 0x15, 0x1) 21:07:47 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "a7e437"}, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x6}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x430080, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10000011}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xacf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffbb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) syz_io_uring_setup(0x6b04, &(0x7f00000002c0)={0x0, 0xe261, 0x0, 0x1, 0x175}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0x468) syz_io_uring_setup(0x4ed8, &(0x7f0000000540)={0x0, 0xf90e, 0x8, 0x3, 0x1ea}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:07:47 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe220}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000}, 0x2000000c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2000c040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "69dd436b108f526e", "d4d2ea676988917ec1ff5f69e81bc80a0ebd791a0f6472ef0246ead68950d14c", 'n\\ep', "01275c9ec3042bc5"}, 0x38) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) accept4(0xffffffffffffffff, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80, 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:07:47 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x2e, 0x0, "c74cea34a0324d9330a14137d43cd688302c5c2985c5d2cf5ec638f83ff55eeb0042997440f42a94c8addcadb6867771a970be68a3a7ac2eaa78ae9187611975049cd8385d1384f4b0cd4f58551078be"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/174, 0xae}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/69, 0x45}], 0xa, &(0x7f0000001840)=""/102, 0x66}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6gre0\x00', r2, 0x2f, 0xfd, 0x20, 0x100, 0x46, @remote, @rand_addr=' \x01\x00', 0x7800, 0x700, 0xbc28, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r0, &(0x7f0000001a40)={0xffffffffffffffff, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r1, 0x4, 0xff, 0x7f, 0x3, 0x3a, @private0, @remote, 0x40, 0x80, 0x2, 0x5}}) r5 = socket(0x28, 0x5, 0xf96) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b40)={r3, 0x4, 0x7c26}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x2, 0x7, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff240}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4841}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000002280)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000002740)=""/9, 0x9}, {&(0x7f0000002780)=""/195, 0xc3}, {&(0x7f0000002880)=""/202, 0xca}], 0x9, &(0x7f0000002a40)=""/146, 0x92}}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/140, 0x8c}], 0x5, &(0x7f0000002e80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f80)=""/70, 0x46}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/58, 0x3a}, {&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/184, 0xb8}], 0x9, &(0x7f0000005440)=""/11, 0xb}, 0x4}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/66, 0x42}, {&(0x7f0000005580)=""/33, 0x21}, {&(0x7f00000055c0)=""/61, 0x3d}, {&(0x7f0000005600)=""/29, 0x1d}, {&(0x7f0000005640)=""/208, 0xd0}, {&(0x7f0000005740)}], 0x6}, 0xae}], 0x4, 0x40010100, &(0x7f0000005900)) 21:07:48 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="c0eec7337d3a8733788613067c56249c53369f587ffad17f6d799877cc702f9823b47529c25ec2b75330ee1ae3426afe5341f76fedbebc6739a97d00d68ab2892898f7df5bbfa008432d5111de8fac5ad3e8e8c0965c675cafb60a4a697bce32a7fd8d91ddbd4d53b1d6dfe7737a006b0e3bb22b3a3b0b4c614ebba78ceca1d532769fdcea199b47680d21e1927051dce0afd8525f0641aec47a1d3052299d646d8e54c7861cd9d976f33f8a06145f175915967cd8628729caabd83f99e2aece2c6d32bdfd8e0fb35033b64c8a39bcc0eef09a693cb0102965", 0xd9, 0x4, &(0x7f0000000140)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0xa1d) r1 = getegid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0xee00, r1, 0x0, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x80, 0x80000000, 0x8ad8, 0x9, 0x200000000, 0x5, 0x101, 0xfff9, r0, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000240)) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0xfffffff9, &(0x7f00000002c0)={[0x400]}, 0x8) clock_gettime(0x5, &(0x7f0000000300)) clock_getres(0x3, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x4}, {{&(0x7f0000000440), 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x3, &(0x7f0000000740)=""/20, 0x14}}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/124, 0x7c}], 0x2, &(0x7f0000000900)=""/92, 0x5c}, 0x1}], 0x3, 0x10000, &(0x7f0000000a40)) epoll_pwait2(r2, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x9]}, 0x8) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r2, &(0x7f0000000b80)={r2, r2, 0x8}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00), &(0x7f0000000d40)=0x14) 21:07:48 executing program 4: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe3, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdb8}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf26, 0x5, 0x5, 0x78, 0xcc81, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x1b, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3ff, 0x4, 0x6, 0xf9a, 0x4, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x30, 0x30, 0x18, 0xc, 0x4, 0x2, 0x60, 0x30, 0x30, 0x3, 0x3, 0x6c, 0x18, 0xb, 0xc, 0xb, 0x3, 0x1, 0x4, 0x30, 0x48, 0x24, 0x1, 0x6c, 0x12]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_SETUP={0x6c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x52, 0x3, "3c240f83e15f888ca6a588334cdd17b17552036e082425f77dac1b79131d4d462460c509772afa0fbd79fb86766973988d6431fb231e22489bb15351f0a2b8bd50f9072f4f546a3219c572d87540"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x9, 0x6, 0x804, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd3c}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x8c}}, 0x840) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x5c}}, 0x5) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = fsopen(&(0x7f0000000840)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1fda}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x38}}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x6ad6, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) accept$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) 21:07:48 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x40e000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x4a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004888}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) getsockname(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bond\x00', {0x2}, 0xcf}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/164, 0xa4}], 0x2}, 0x1}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/175, 0xaf}], 0x3, &(0x7f0000000800)=""/30, 0x1e}, 0x9}, {{&(0x7f0000000840)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/123, 0x7b}, 0x5c}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/73, 0x49}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/153, 0x99}, 0x7}], 0x4, 0x100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001f40)={0x3, &(0x7f0000001f00)=[{0x81, 0x1, 0xc0, 0x1ff}, {0x9, 0x40, 0x0, 0x10000}, {0x0, 0x7, 0x40, 0x8000}]}) accept4(0xffffffffffffffff, &(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002400)=0x80, 0x800) [ 180.554143] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 180.555679] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.556501] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.557598] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.559074] Call Trace: [ 180.559970] [ 180.560697] __schedule+0x893/0x2470 [ 180.561314] ? io_schedule_timeout+0x150/0x150 [ 180.562020] ? do_raw_spin_lock+0x121/0x260 [ 180.562662] ? rwlock_bug.part.0+0x90/0x90 [ 180.563318] schedule+0xda/0x1b0 [ 180.563824] rescuer_thread+0x851/0xdb0 [ 180.564441] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.565237] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.566098] ? lockdep_hardirqs_on+0x79/0x100 [ 180.566769] ? worker_thread+0x1260/0x1260 [ 180.567472] kthread+0x2ed/0x3a0 [ 180.568011] ? kthread_complete_and_exit+0x40/0x40 [ 180.568779] ret_from_fork+0x22/0x30 [ 180.569431] [ 180.569778] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.570769] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.571616] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.572804] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.574092] Call Trace: [ 180.574503] [ 180.574903] __schedule+0x893/0x2470 [ 180.575470] ? io_schedule_timeout+0x150/0x150 [ 180.576199] ? do_raw_spin_lock+0x121/0x260 [ 180.576912] ? rwlock_bug.part.0+0x90/0x90 [ 180.577588] schedule+0xda/0x1b0 [ 180.578162] rescuer_thread+0x851/0xdb0 [ 180.578796] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.579605] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.580426] ? lockdep_hardirqs_on+0x79/0x100 [ 180.581152] ? worker_thread+0x1260/0x1260 [ 180.581829] kthread+0x2ed/0x3a0 [ 180.582378] ? kthread_complete_and_exit+0x40/0x40 [ 180.583161] ret_from_fork+0x22/0x30 [ 180.583776] [ 180.584174] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.585200] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.586047] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.587240] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.588539] Call Trace: [ 180.588972] [ 180.589349] __schedule+0x893/0x2470 [ 180.589986] ? io_schedule_timeout+0x150/0x150 [ 180.590660] ? do_raw_spin_lock+0x121/0x260 [ 180.591369] ? rwlock_bug.part.0+0x90/0x90 [ 180.592074] schedule+0xda/0x1b0 [ 180.592585] rescuer_thread+0x851/0xdb0 [ 180.593257] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.594054] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.594800] ? lockdep_hardirqs_on+0x79/0x100 [ 180.595543] ? worker_thread+0x1260/0x1260 [ 180.596240] kthread+0x2ed/0x3a0 [ 180.596750] ? kthread_complete_and_exit+0x40/0x40 [ 180.597552] ret_from_fork+0x22/0x30 [ 180.598194] [ 180.598550] INFO: task netns:6 blocked for more than 143 seconds. [ 180.599497] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.600333] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.601528] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.602799] Call Trace: [ 180.603229] [ 180.603598] __schedule+0x893/0x2470 [ 180.604229] ? io_schedule_timeout+0x150/0x150 [ 180.604980] ? do_raw_spin_lock+0x121/0x260 [ 180.605666] ? rwlock_bug.part.0+0x90/0x90 [ 180.606388] schedule+0xda/0x1b0 [ 180.606942] rescuer_thread+0x851/0xdb0 [ 180.607564] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.608379] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.609207] ? lockdep_hardirqs_on+0x79/0x100 [ 180.609946] ? worker_thread+0x1260/0x1260 [ 180.610594] kthread+0x2ed/0x3a0 [ 180.611169] ? kthread_complete_and_exit+0x40/0x40 [ 180.611960] ret_from_fork+0x22/0x30 [ 180.612570] [ 180.612976] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 180.613996] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.614807] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.616005] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 180.617261] Workqueue: 0x0 (rcu_gp) [ 180.617825] Call Trace: [ 180.618258] [ 180.618611] __schedule+0x893/0x2470 [ 180.619240] ? io_schedule_timeout+0x150/0x150 [ 180.619989] ? rwlock_bug.part.0+0x90/0x90 [ 180.620671] schedule+0xda/0x1b0 [ 180.621269] worker_thread+0x15f/0x1260 [ 180.621933] ? process_one_work+0x16a0/0x16a0 [ 180.622595] kthread+0x2ed/0x3a0 [ 180.623164] ? kthread_complete_and_exit+0x40/0x40 [ 180.623905] ret_from_fork+0x22/0x30 [ 180.624509] [ 180.624911] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.625952] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.626704] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.627882] task:kworker/0:0H state:I stack:29416 pid:8 ppid:2 flags:0x00004000 [ 180.629107] Workqueue: 0x0 (events_highpri) [ 180.629791] Call Trace: [ 180.630226] [ 180.630592] __schedule+0x893/0x2470 [ 180.631209] ? io_schedule_timeout+0x150/0x150 [ 180.631962] schedule+0xda/0x1b0 [ 180.632495] worker_thread+0x15f/0x1260 [ 180.633174] ? process_one_work+0x16a0/0x16a0 [ 180.633884] kthread+0x2ed/0x3a0 [ 180.634420] ? kthread_complete_and_exit+0x40/0x40 [ 180.635221] ret_from_fork+0x22/0x30 [ 180.635827] [ 180.636237] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.637293] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.638144] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.639287] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.640538] Call Trace: [ 180.640973] [ 180.641355] __schedule+0x893/0x2470 [ 180.641979] ? io_schedule_timeout+0x150/0x150 [ 180.642693] ? do_raw_spin_lock+0x121/0x260 [ 180.643457] ? rwlock_bug.part.0+0x90/0x90 [ 180.644130] schedule+0xda/0x1b0 [ 180.644654] rescuer_thread+0x851/0xdb0 [ 180.645319] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.646083] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.646910] ? lockdep_hardirqs_on+0x79/0x100 [ 180.647577] ? worker_thread+0x1260/0x1260 [ 180.648279] kthread+0x2ed/0x3a0 [ 180.648787] ? kthread_complete_and_exit+0x40/0x40 [ 180.649591] ret_from_fork+0x22/0x30 [ 180.650213] [ 180.650566] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.651653] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.652495] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.653675] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.654900] Call Trace: [ 180.655276] [ 180.655639] __schedule+0x893/0x2470 [ 180.656271] ? io_schedule_timeout+0x150/0x150 [ 180.656977] ? mark_held_locks+0x9e/0xe0 [ 180.657631] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.658431] schedule+0xda/0x1b0 [ 180.659004] rcu_tasks_one_gp+0x3db/0xc10 [ 180.659688] rcu_tasks_kthread+0x80/0xa0 [ 180.660357] ? rcu_tasks_postscan+0x10/0x10 [ 180.661029] kthread+0x2ed/0x3a0 [ 180.661575] ? kthread_complete_and_exit+0x40/0x40 [ 180.662374] ret_from_fork+0x22/0x30 [ 180.662986] [ 180.822491] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 180.823588] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.824449] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.825571] task:kworker/1:0 state:I stack:29136 pid:20 ppid:2 flags:0x00004000 [ 180.826789] Workqueue: 0x0 (cgwb_release) [ 180.827427] Call Trace: [ 180.827799] [ 180.828174] __schedule+0x893/0x2470 [ 180.828741] ? io_schedule_timeout+0x150/0x150 [ 180.829447] ? rwlock_bug.part.0+0x90/0x90 [ 180.830118] schedule+0xda/0x1b0 [ 180.830628] worker_thread+0x15f/0x1260 [ 180.831290] ? process_one_work+0x16a0/0x16a0 [ 180.832009] kthread+0x2ed/0x3a0 [ 180.832550] ? kthread_complete_and_exit+0x40/0x40 [ 180.833346] ret_from_fork+0x22/0x30 [ 180.833990] [ 180.834339] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.835391] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.836219] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.837414] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 180.838715] Workqueue: 0x0 (kblockd) [ 180.839330] Call Trace: [ 180.839732] [ 180.840121] __schedule+0x893/0x2470 [ 180.840701] ? io_schedule_timeout+0x150/0x150 [ 180.841469] schedule+0xda/0x1b0 [ 180.842043] worker_thread+0x15f/0x1260 [ 180.842690] ? process_one_work+0x16a0/0x16a0 [ 180.843414] kthread+0x2ed/0x3a0 [ 180.843986] ? kthread_complete_and_exit+0x40/0x40 [ 180.844748] ret_from_fork+0x22/0x30 [ 180.845401] [ 180.845814] [ 180.845814] Showing all locks held in the system: [ 180.846773] 1 lock held by rcu_tasks_kthre/11: [ 180.847478] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.848969] 1 lock held by khungtaskd/25: [ 180.849580] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.850964] 1 lock held by systemd-journal/112: [ 180.851676] 1 lock held by in:imklog/193: [ 180.852341] 1 lock held by systemd-udevd/4475: [ 180.853062] [ 180.853350] ============================================= [ 180.853350] VM DIAGNOSIS: 21:07:48 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffff888037d1f818 RDX=0000000000000001 RSI=ffffffff8424eb7b RDI=ffff888015f348e0 RBP=ffff888037d1f818 RSP=ffff888037d1f740 R8 =ffffffff85ed04d2 R9 =ffffffff85ed04d6 R10=ffffed1006fa3f05 R11=ffff888037d1f800 R12=ffff888037d1f801 R13=ffff888037d1f820 R14=ffff888037d1f7c0 R15=ffff8880157a8bd0 RIP=ffffffff8111a2f9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2c7d63028 CR3=00000000370f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000010000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007f898e2137c8 00007f898e2137c0 YMM04=0000000000000000 0000000000000000 4075d872c519326a 544f2f07f950bdb8 YMM05=0000000000000000 0000000000000000 a2f05153b19b4822 1e23fb31648d9873 YMM06=0000000000000000 0000000000000000 697686fb79bd0ffa 2a7709c56024464d YMM07=0000000000000000 0000000000000000 1d13791bac7df725 24086e035275b117 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001 R12=0000000000000039 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7475e82fc8 CR3=0000000008d46000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000ff000000ffff 0000000000000000 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffff0f0e0d0c0b0a YMM03=0000000000000000 0000000000000000 2d646c6f2074736f 0065736100006266 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000