Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:26718' (ECDSA) to the list of known hosts. 2022/10/04 06:15:44 fuzzer started 2022/10/04 06:15:45 dialing manager at localhost:35095 syzkaller login: [ 38.105202] cgroup: Unknown subsys name 'net' [ 38.211880] cgroup: Unknown subsys name 'rlimit' 2022/10/04 06:16:00 syscalls: 200 2022/10/04 06:16:00 code coverage: enabled 2022/10/04 06:16:00 comparison tracing: enabled 2022/10/04 06:16:00 extra coverage: enabled 2022/10/04 06:16:00 setuid sandbox: enabled 2022/10/04 06:16:00 namespace sandbox: enabled 2022/10/04 06:16:00 Android sandbox: enabled 2022/10/04 06:16:00 fault injection: enabled 2022/10/04 06:16:00 leak checking: enabled 2022/10/04 06:16:00 net packet injection: enabled 2022/10/04 06:16:00 net device setup: enabled 2022/10/04 06:16:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 06:16:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 06:16:00 USB emulation: enabled 2022/10/04 06:16:00 hci packet injection: enabled 2022/10/04 06:16:00 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 06:16:00 802.15.4 emulation: enabled 2022/10/04 06:16:00 fetching corpus: 0, signal 0/0 (executing program) 2022/10/04 06:16:02 starting 8 fuzzer processes 06:16:02 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "747c2875cdfc9fe20e8c3cc794d5837daec8472f360d01401dbd2530336d8852eff0808501ace2bfb84a9b90ad7a17972d17b4af6473d5456ccd2932592252b2cf985d58077fdf11c226a5dcc722e80095d5c3a1d63f9404d0c99531acb5867d9c1390b0d466436371438fdfaa4caff26f8d45f76ca2d555293294313494a282183e1934d1870358a81ca9b67f20c7b38c31b6ffa3f9a910d27923112bd9916f5b12fd5d43f423bb611490", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x4009) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0x9, 0x0, 0xca, 0x7fff}, {0x40, 0x20, 0xc0, 0xadd}, {0xf753, 0x1f, 0x6}, {0x101, 0x8, 0xf4, 0x1}, {0x0, 0x2, 0x7, 0x3}]}) 06:16:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000cc0), 0x280000, 0x0) openat$cgroup_type(r8, &(0x7f0000000d00), 0x2, 0x0) 06:16:02 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x4960bc39557aacbb, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x591}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040855}, 0x20000010) 06:16:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) 06:16:02 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000800)={0xf}) 06:16:02 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:16:02 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r7 = socket$inet6(0xa, 0x6, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10, r7, 0xcb48e000) r8 = openat$cgroup_ro(r6, &(0x7f0000000780)='freezer.self_freezing\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r8, 0x266) [ 54.593246] audit: type=1400 audit(1664864162.401:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:16:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000cc0)={@private2, @mcast1, @remote, 0x8000, 0xa91, 0x4, 0x0, 0x6ab1, 0xc0000091, r6}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xa, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) [ 56.033406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.035116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.036611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.038304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.039848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.041520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.043293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.045863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.046957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.048004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.049216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.050415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.051568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.053284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.054416] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.055677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.056807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.058068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.059339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.065977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.068614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.069801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.071131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.072500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.073632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.074903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.077386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.078496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.079801] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.081051] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 56.082457] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.083591] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.084843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.085883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.087407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.088687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.089850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.091166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.092400] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.093926] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.096660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.101684] Bluetooth: hci1: HCI_REQ-0x0c1a [ 56.107401] Bluetooth: hci2: HCI_REQ-0x0c1a [ 56.110875] Bluetooth: hci5: HCI_REQ-0x0c1a [ 56.111733] Bluetooth: hci3: HCI_REQ-0x0c1a [ 56.113756] Bluetooth: hci4: HCI_REQ-0x0c1a [ 56.115604] Bluetooth: hci0: HCI_REQ-0x0c1a [ 56.152365] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.153728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.155534] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 56.157154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 56.162390] Bluetooth: hci7: HCI_REQ-0x0c1a [ 56.185405] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.191686] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 56.196451] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 56.208308] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.130389] Bluetooth: hci1: command 0x0409 tx timeout [ 58.131553] Bluetooth: hci4: command 0x0409 tx timeout [ 58.194241] Bluetooth: hci7: command 0x0409 tx timeout [ 58.194974] Bluetooth: hci2: command 0x0409 tx timeout [ 58.195642] Bluetooth: hci0: command 0x0409 tx timeout [ 58.196622] Bluetooth: hci5: command 0x0409 tx timeout [ 58.197277] Bluetooth: hci3: command 0x0409 tx timeout [ 58.259620] Bluetooth: hci6: command 0x0409 tx timeout [ 60.179233] Bluetooth: hci4: command 0x041b tx timeout [ 60.179698] Bluetooth: hci1: command 0x041b tx timeout [ 60.243219] Bluetooth: hci3: command 0x041b tx timeout [ 60.243682] Bluetooth: hci5: command 0x041b tx timeout [ 60.244111] Bluetooth: hci0: command 0x041b tx timeout [ 60.244516] Bluetooth: hci2: command 0x041b tx timeout [ 60.244902] Bluetooth: hci7: command 0x041b tx timeout [ 60.307173] Bluetooth: hci6: command 0x041b tx timeout [ 62.226339] Bluetooth: hci1: command 0x040f tx timeout [ 62.227138] Bluetooth: hci4: command 0x040f tx timeout [ 62.290268] Bluetooth: hci7: command 0x040f tx timeout [ 62.290991] Bluetooth: hci2: command 0x040f tx timeout [ 62.292124] Bluetooth: hci0: command 0x040f tx timeout [ 62.292768] Bluetooth: hci5: command 0x040f tx timeout [ 62.293471] Bluetooth: hci3: command 0x040f tx timeout [ 62.354184] Bluetooth: hci6: command 0x040f tx timeout [ 64.275199] Bluetooth: hci4: command 0x0419 tx timeout [ 64.275664] Bluetooth: hci1: command 0x0419 tx timeout [ 64.339161] Bluetooth: hci3: command 0x0419 tx timeout [ 64.339636] Bluetooth: hci5: command 0x0419 tx timeout [ 64.340050] Bluetooth: hci0: command 0x0419 tx timeout [ 64.340498] Bluetooth: hci2: command 0x0419 tx timeout [ 64.340901] Bluetooth: hci7: command 0x0419 tx timeout [ 64.402128] Bluetooth: hci6: command 0x0419 tx timeout 06:16:56 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000800)={0xf}) 06:16:56 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000800)={0xf}) 06:16:57 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x4960bc39557aacbb, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x591}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040855}, 0x20000010) 06:16:57 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000800)={0xf}) 06:16:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) 06:16:57 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)) 06:16:57 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:16:57 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x4960bc39557aacbb, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x591}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040855}, 0x20000010) [ 110.774586] audit: type=1326 audit(1664864218.583:7): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4017 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 110.891970] audit: type=1326 audit(1664864218.700:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4017 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 110.943926] audit: type=1326 audit(1664864218.752:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4017 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 111.444596] audit: type=1400 audit(1664864219.253:10): avc: denied { create } for pid=4064 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 111.602641] audit: type=1326 audit(1664864219.411:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4017 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) 06:17:18 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0x9}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:18 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x4960bc39557aacbb, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x591}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040855}, 0x20000010) 06:17:18 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000cc0)={@private2, @mcast1, @remote, 0x8000, 0xa91, 0x4, 0x0, 0x6ab1, 0xc0000091, r6}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xa, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) 06:17:18 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000cc0), 0x280000, 0x0) openat$cgroup_type(r8, &(0x7f0000000d00), 0x2, 0x0) 06:17:18 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:18 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r7 = socket$inet6(0xa, 0x6, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10, r7, 0xcb48e000) r8 = openat$cgroup_ro(r6, &(0x7f0000000780)='freezer.self_freezing\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r8, 0x266) 06:17:18 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "747c2875cdfc9fe20e8c3cc794d5837daec8472f360d01401dbd2530336d8852eff0808501ace2bfb84a9b90ad7a17972d17b4af6473d5456ccd2932592252b2cf985d58077fdf11c226a5dcc722e80095d5c3a1d63f9404d0c99531acb5867d9c1390b0d466436371438fdfaa4caff26f8d45f76ca2d555293294313494a282183e1934d1870358a81ca9b67f20c7b38c31b6ffa3f9a910d27923112bd9916f5b12fd5d43f423bb611490", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x4009) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0x9, 0x0, 0xca, 0x7fff}, {0x40, 0x20, 0xc0, 0xadd}, {0xf753, 0x1f, 0x6}, {0x101, 0x8, 0xf4, 0x1}, {0x0, 0x2, 0x7, 0x3}]}) [ 130.341063] audit: type=1326 audit(1664864238.149:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4089 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 130.480988] audit: type=1326 audit(1664864238.289:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4089 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 130.523953] audit: type=1326 audit(1664864238.331:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4089 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:18 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:18 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x1110c1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:30 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "747c2875cdfc9fe20e8c3cc794d5837daec8472f360d01401dbd2530336d8852eff0808501ace2bfb84a9b90ad7a17972d17b4af6473d5456ccd2932592252b2cf985d58077fdf11c226a5dcc722e80095d5c3a1d63f9404d0c99531acb5867d9c1390b0d466436371438fdfaa4caff26f8d45f76ca2d555293294313494a282183e1934d1870358a81ca9b67f20c7b38c31b6ffa3f9a910d27923112bd9916f5b12fd5d43f423bb611490", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x4009) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0x9, 0x0, 0xca, 0x7fff}, {0x40, 0x20, 0xc0, 0xadd}, {0xf753, 0x1f, 0x6}, {0x101, 0x8, 0xf4, 0x1}, {0x0, 0x2, 0x7, 0x3}]}) 06:17:30 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r7 = socket$inet6(0xa, 0x6, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10, r7, 0xcb48e000) r8 = openat$cgroup_ro(r6, &(0x7f0000000780)='freezer.self_freezing\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r8, 0x266) 06:17:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) 06:17:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000cc0)={@private2, @mcast1, @remote, 0x8000, 0xa91, 0x4, 0x0, 0x6ab1, 0xc0000091, r6}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xa, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) 06:17:30 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x2, 0xfffffffffffffff9}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:30 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000cc0), 0x280000, 0x0) openat$cgroup_type(r8, &(0x7f0000000d00), 0x2, 0x0) 06:17:30 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:30 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) [ 143.254682] audit: type=1326 audit(1664864251.058:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4161 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:31 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) socketpair(0x10, 0x6, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) [ 143.364718] audit: type=1326 audit(1664864251.173:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4161 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 143.416874] audit: type=1326 audit(1664864251.225:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4161 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:44 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "747c2875cdfc9fe20e8c3cc794d5837daec8472f360d01401dbd2530336d8852eff0808501ace2bfb84a9b90ad7a17972d17b4af6473d5456ccd2932592252b2cf985d58077fdf11c226a5dcc722e80095d5c3a1d63f9404d0c99531acb5867d9c1390b0d466436371438fdfaa4caff26f8d45f76ca2d555293294313494a282183e1934d1870358a81ca9b67f20c7b38c31b6ffa3f9a910d27923112bd9916f5b12fd5d43f423bb611490", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x4009) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0x9, 0x0, 0xca, 0x7fff}, {0x40, 0x20, 0xc0, 0xadd}, {0xf753, 0x1f, 0x6}, {0x101, 0x8, 0xf4, 0x1}, {0x0, 0x2, 0x7, 0x3}]}) 06:17:44 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) 06:17:44 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r7 = socket$inet6(0xa, 0x6, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10, r7, 0xcb48e000) r8 = openat$cgroup_ro(r6, &(0x7f0000000780)='freezer.self_freezing\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r8, 0x266) 06:17:44 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) 06:17:44 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) read$hiddev(r2, &(0x7f0000000480)=""/151, 0x97) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000cc0), 0x280000, 0x0) openat$cgroup_type(r8, &(0x7f0000000d00), 0x2, 0x0) [ 156.906453] audit: type=1326 audit(1664864264.715:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4211 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000cc0)={@private2, @mcast1, @remote, 0x8000, 0xa91, 0x4, 0x0, 0x6ab1, 0xc0000091, r6}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xa, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) 06:17:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) [ 157.011940] audit: type=1326 audit(1664864264.820:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4211 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:44 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000440)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) [ 157.063711] audit: type=1326 audit(1664864264.871:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4211 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:44 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) 06:17:45 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) 06:17:45 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x464, 0x4, 0x70bd2a, 0x25dfdbfc, "8fac8bedda1b4628702e7619d0dad4f3bfe4a99a3ae69f220bcee4a18a12012ef0174b05a6ce55e6d3106721ce2cf53abca71d14311542d0e1047cf228f688c69c6604084df6be149a6e1a66", ["", "", "", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:45 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) 06:17:45 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) 06:17:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000cc0)={@private2, @mcast1, @remote, 0x8000, 0xa91, 0x4, 0x0, 0x6ab1, 0xc0000091, r6}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) 06:17:45 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r7 = socket$inet6(0xa, 0x6, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10, r7, 0xcb48e000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x266) 06:17:56 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "747c2875cdfc9fe20e8c3cc794d5837daec8472f360d01401dbd2530336d8852eff0808501ace2bfb84a9b90ad7a17972d17b4af6473d5456ccd2932592252b2cf985d58077fdf11c226a5dcc722e80095d5c3a1d63f9404d0c99531acb5867d9c1390b0d466436371438fdfaa4caff26f8d45f76ca2d555293294313494a282183e1934d1870358a81ca9b67f20c7b38c31b6ffa3f9a910d27923112bd9916f5b12fd5d43f423bb611490", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x4009) 06:17:56 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:56 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x80001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:56 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) 06:17:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) 06:17:56 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) 06:17:56 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept(r1, &(0x7f0000000840)=@ethernet={0x0, @link_local}, &(0x7f00000008c0)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) 06:17:56 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) socket$inet6(0xa, 0x6, 0x8) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x266) 06:17:56 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:56 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f0000000200), &(0x7f0000000240)=""/3, 0x3}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) [ 168.757347] audit: type=1326 audit(1664864276.565:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4314 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 168.866923] audit: type=1326 audit(1664864276.675:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4314 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:17:56 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x60443, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:56 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x10000042) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:56 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:57 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$packet(0x11, 0x2, 0x300) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) 06:17:57 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:57 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback, 0x0}, &(0x7f0000000080)=0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r2, 0x1, 0x6, 0x6, @local}, 0x14) accept(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000780)={0x19}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:57 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:17:57 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) 06:17:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x80, 0x3, 0x4b, @mcast2, @empty, 0x8, 0x8, 0x7fff, 0xba}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) 06:17:57 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "747c2875cdfc9fe20e8c3cc794d5837daec8472f360d01401dbd2530336d8852eff0808501ace2bfb84a9b90ad7a17972d17b4af6473d5456ccd2932592252b2cf985d58077fdf11c226a5dcc722e80095d5c3a1d63f9404d0c99531acb5867d9c1390b0d466436371438fdfaa4caff26f8d45f76ca2d555293294313494a282183e1934d1870358a81ca9b67f20c7b38c31b6ffa3f9a910d27923112bd9916f5b12fd5d43f423bb611490", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) 06:17:57 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback}, &(0x7f0000000080)=0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r1, 0x1, 0x6, 0x6, @local}, 0x14) accept(r0, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000780)={0x19}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000c80)={'\x00', 0xffff7fff, 0x3, 0xffffff69}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:17:57 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x266) 06:17:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000004) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) [ 169.655242] audit: type=1326 audit(1664864277.461:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4390 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 169.758000] audit: type=1326 audit(1664864277.566:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4390 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 [ 179.669021] Bluetooth: hci1: command 0x0406 tx timeout [ 179.669899] Bluetooth: hci4: command 0x0406 tx timeout [ 179.670729] Bluetooth: hci3: command 0x0406 tx timeout [ 179.671531] Bluetooth: hci5: command 0x0406 tx timeout [ 179.672317] Bluetooth: hci2: command 0x0406 tx timeout [ 179.673127] Bluetooth: hci0: command 0x0406 tx timeout [ 179.673892] Bluetooth: hci7: command 0x0406 tx timeout [ 179.674715] Bluetooth: hci6: command 0x0406 tx timeout [ 181.202142] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 181.202720] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.203156] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.203718] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 181.204407] Call Trace: [ 181.204608] [ 181.204788] __schedule+0x893/0x2470 [ 181.205107] ? io_schedule_timeout+0x150/0x150 [ 181.205454] ? do_raw_spin_lock+0x121/0x260 [ 181.206007] ? rwlock_bug.part.0+0x90/0x90 [ 181.206429] schedule+0xda/0x1b0 [ 181.207232] rescuer_thread+0x851/0xdb0 [ 181.207979] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.208357] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.208708] ? lockdep_hardirqs_on+0x79/0x100 [ 181.209032] ? worker_thread+0x1260/0x1260 [ 181.209356] kthread+0x2ed/0x3a0 [ 181.209606] ? kthread_complete_and_exit+0x40/0x40 [ 181.209953] ret_from_fork+0x22/0x30 [ 181.210257] [ 181.210429] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 181.210884] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.211264] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.211772] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 181.212367] Call Trace: [ 181.212551] [ 181.212718] __schedule+0x893/0x2470 [ 181.212990] ? io_schedule_timeout+0x150/0x150 [ 181.213332] ? do_raw_spin_lock+0x121/0x260 [ 181.213635] ? rwlock_bug.part.0+0x90/0x90 [ 181.213942] schedule+0xda/0x1b0 [ 181.214210] rescuer_thread+0x851/0xdb0 [ 181.214497] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.214852] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.215223] ? lockdep_hardirqs_on+0x79/0x100 [ 181.215538] ? worker_thread+0x1260/0x1260 [ 181.215836] kthread+0x2ed/0x3a0 [ 181.216100] ? kthread_complete_and_exit+0x40/0x40 [ 181.216444] ret_from_fork+0x22/0x30 [ 181.216718] [ 181.216884] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 181.217348] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.217704] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.218246] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 181.218806] Call Trace: [ 181.218986] [ 181.219175] __schedule+0x893/0x2470 [ 181.219447] ? io_schedule_timeout+0x150/0x150 [ 181.219768] ? do_raw_spin_lock+0x121/0x260 [ 181.220097] ? rwlock_bug.part.0+0x90/0x90 [ 181.220399] schedule+0xda/0x1b0 [ 181.220643] rescuer_thread+0x851/0xdb0 [ 181.220925] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.221297] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.221644] ? lockdep_hardirqs_on+0x79/0x100 [ 181.221963] ? worker_thread+0x1260/0x1260 [ 181.222285] kthread+0x2ed/0x3a0 [ 181.222527] ? kthread_complete_and_exit+0x40/0x40 [ 181.222885] ret_from_fork+0x22/0x30 [ 181.223185] [ 181.223354] INFO: task netns:6 blocked for more than 143 seconds. [ 181.223762] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.224148] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.224659] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 181.225238] Call Trace: [ 181.225421] [ 181.225589] __schedule+0x893/0x2470 [ 181.225858] ? io_schedule_timeout+0x150/0x150 [ 181.226202] ? do_raw_spin_lock+0x121/0x260 [ 181.226505] ? rwlock_bug.part.0+0x90/0x90 [ 181.226810] schedule+0xda/0x1b0 [ 181.227053] rescuer_thread+0x851/0xdb0 [ 181.227362] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.227708] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.228055] ? lockdep_hardirqs_on+0x79/0x100 [ 181.228397] ? worker_thread+0x1260/0x1260 [ 181.228694] kthread+0x2ed/0x3a0 [ 181.228935] ? kthread_complete_and_exit+0x40/0x40 [ 181.229303] ret_from_fork+0x22/0x30 [ 181.229582] [ 181.229748] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 181.230209] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.230564] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.231107] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 181.231665] Workqueue: 0x0 (rcu_gp) [ 181.231931] Call Trace: [ 181.232134] [ 181.232299] __schedule+0x893/0x2470 [ 181.232567] ? io_schedule_timeout+0x150/0x150 [ 181.232896] schedule+0xda/0x1b0 [ 181.233163] worker_thread+0x15f/0x1260 [ 181.233460] ? process_one_work+0x16a0/0x16a0 [ 181.233778] kthread+0x2ed/0x3a0 [ 181.234021] ? kthread_complete_and_exit+0x40/0x40 [ 181.234396] ret_from_fork+0x22/0x30 [ 181.234696] [ 181.234871] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 181.235342] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.235697] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.236227] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 181.236784] Workqueue: 0x0 (events_highpri) [ 181.237112] Call Trace: [ 181.237297] [ 181.237461] __schedule+0x893/0x2470 [ 181.237734] ? io_schedule_timeout+0x150/0x150 [ 181.238059] schedule+0xda/0x1b0 [ 181.238327] worker_thread+0x15f/0x1260 [ 181.238619] ? process_one_work+0x16a0/0x16a0 [ 181.238943] kthread+0x2ed/0x3a0 [ 181.239209] ? kthread_complete_and_exit+0x40/0x40 [ 181.239550] ret_from_fork+0x22/0x30 [ 181.239828] [ 181.239994] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 181.240466] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.240822] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.241355] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 181.241915] Call Trace: [ 181.242118] [ 181.242283] __schedule+0x893/0x2470 [ 181.242555] ? io_schedule_timeout+0x150/0x150 [ 181.242887] ? do_raw_spin_lock+0x121/0x260 [ 181.243214] ? rwlock_bug.part.0+0x90/0x90 [ 181.243517] schedule+0xda/0x1b0 [ 181.243762] rescuer_thread+0x851/0xdb0 [ 181.244042] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.244412] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.244756] ? lockdep_hardirqs_on+0x79/0x100 [ 181.245093] ? worker_thread+0x1260/0x1260 [ 181.245393] kthread+0x2ed/0x3a0 [ 181.245634] ? kthread_complete_and_exit+0x40/0x40 [ 181.245974] ret_from_fork+0x22/0x30 [ 181.246276] [ 181.246444] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 181.246913] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.247293] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.247804] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 181.248384] Call Trace: [ 181.248565] [ 181.248732] __schedule+0x893/0x2470 [ 181.249001] ? io_schedule_timeout+0x150/0x150 [ 181.249344] ? mark_held_locks+0x9e/0xe0 [ 181.249634] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.249984] schedule+0xda/0x1b0 [ 181.250254] rcu_tasks_one_gp+0x3db/0xc10 [ 181.250565] rcu_tasks_kthread+0x80/0xa0 [ 181.250862] ? rcu_tasks_postscan+0x10/0x10 [ 181.251188] kthread+0x2ed/0x3a0 [ 181.251434] ? kthread_complete_and_exit+0x40/0x40 [ 181.251774] ret_from_fork+0x22/0x30 [ 181.252048] [ 181.252245] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 181.252693] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.253053] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.253584] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 181.254166] Workqueue: 0x0 (kblockd) [ 181.254436] Call Trace: [ 181.254616] [ 181.254786] __schedule+0x893/0x2470 [ 181.255054] ? io_schedule_timeout+0x150/0x150 [ 181.255408] schedule+0xda/0x1b0 [ 181.255653] worker_thread+0x15f/0x1260 [ 181.255946] ? process_one_work+0x16a0/0x16a0 [ 181.256292] kthread+0x2ed/0x3a0 [ 181.256535] ? kthread_complete_and_exit+0x40/0x40 [ 181.256877] ret_from_fork+0x22/0x30 [ 181.257186] [ 181.257355] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 181.257799] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.258180] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.258699] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 181.259283] Call Trace: [ 181.259465] [ 181.259630] __schedule+0x893/0x2470 [ 181.259899] ? io_schedule_timeout+0x150/0x150 [ 181.260248] ? do_raw_spin_lock+0x121/0x260 [ 181.260551] ? rwlock_bug.part.0+0x90/0x90 [ 181.260852] schedule+0xda/0x1b0 [ 181.261119] rescuer_thread+0x851/0xdb0 [ 181.261405] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.261748] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.262115] ? lockdep_hardirqs_on+0x79/0x100 [ 181.262430] ? worker_thread+0x1260/0x1260 [ 181.262737] kthread+0x2ed/0x3a0 [ 181.262980] ? kthread_complete_and_exit+0x40/0x40 [ 181.263343] ret_from_fork+0x22/0x30 [ 181.263623] [ 181.263847] [ 181.263847] Showing all locks held in the system: [ 181.264328] 1 lock held by rcu_tasks_kthre/11: [ 181.264691] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 181.265483] 1 lock held by khungtaskd/25: [ 181.265795] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 181.266519] 3 locks held by systemd-journal/111: [ 181.266888] 1 lock held by in:imklog/210: [ 181.267229] #0: ffff888008ad6ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 181.267882] 4 locks held by syz-executor/4432: [ 181.268265] [ 181.268409] ============================================= [ 181.268409] 06:18:11 executing program 0: pkey_alloc(0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)) syz_io_uring_setup(0x4148, &(0x7f0000000080)={0x0, 0xf29f, 0x20, 0x10001, 0x3cc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x6, 0x3f, &(0x7f0000000180)=""/229, 0xe5, 0x2}, 0x67) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) io_uring_setup(0x266d, &(0x7f0000000300)={0x0, 0xf2dd, 0x4, 0x0, 0x1be, 0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000480)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r1, 0x8000000) syz_open_dev$hiddev(&(0x7f00000004c0), 0x387, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x2d40) r5 = inotify_init1(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r5, 0xa6064000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x7fff, 0x0, 0x0, 0x7}, {0x9, 0x40, 0x1, 0x9}, {0x706, 0xff, 0x0, 0x8}, {0x9, 0x80, 0x3f, 0x2}, {0x4, 0x0, 0x3, 0xfffffc00}, {0x3, 0x40, 0x0, 0xf62}, {0x405, 0x2, 0x83, 0xcc}]}) 06:18:11 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "a6a6c348275775f689c42bfdab659f9cafe840756c1e8bc5cdb6cc0af2fa69d4458b8b1cb53f565c5e88b0", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10002018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket(0x11, 0x80000, 0xfffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xac, 0x0, &(0x7f00000004c0)=[@free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/217, 0xd9, 0x1, 0x25}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1005, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}], 0x52, 0x0, &(0x7f0000000580)="6b6640cf47dd1dba884fb6ceba6e7e112485c5ffe4001e2887a89b1805d700e7cb67188d8c6489f73f47b0fcb13f7660faba67bc0abfe9280cc59f8df7e1d517e7b92989d084b9dcbde1e4d2f4c8a281d0ed"}) socketpair(0x5, 0x5, 0xffffff80, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfb, "723a2b68c21782539a91d423dcc2366570ddd8c0e36a256d21bb2a24c6638369adef8a916be861d7840e68dc9252b6f73290eabb76eb94475ed89c1d105bf981ae2578b270d491118899e9e944dbf92ca2eb5f6b9e782725e7ae30da19b7fe4d104a25b44afec35a8e8fa02f0de07a3637ea18949362327202879ef5e07bb45bdeaca9c9efbace5750b7971464b24ab0667449de817f0e6efec3b67924ad3e32e12db2632cf76d8cae37b5b3b4e29cc446ef5899fa27b79c8d858673e6be006fe9650d30f7ff0efb4faa3b824420cc121d4a2a41", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) write$vga_arbiter(r6, &(0x7f0000000c00)=@target={'target ', {'PCI:', '1b', ':', '7', ':', '0', '.', '16'}}, 0x15) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000cc0), 0x280000, 0x0) openat$cgroup_type(r8, &(0x7f0000000d00), 0x2, 0x0) [ 183.671232] audit: type=1326 audit(1664864291.477:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4433 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:18:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ec}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x3, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x44, 0xa, "0ada58af4cb4e548"}, @generic={0xbb22e1a7dadd83eb, 0x7, "5e7d1d41b0"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x40, 0x14, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, 0x8, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)) syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) 06:18:11 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x266) 06:18:11 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x682b40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:18:11 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback}, &(0x7f0000000080)=0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r1, 0x1, 0x6, 0x6, @local}, 0x14) accept(r0, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000780)={0x19}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:18:11 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x9, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) getpeername(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="4f9529416701ec9b28331cb159328f3a0a5868f8461cbda08d32e0ecc221179a24d7adf9262d85acb0fd0b6f5fe44ae7d1f22acfb33cf5a928b83a35cf910c463b38855fe89ce9ca202e7cfbeaef4a2a3e8c3fcc11f836f026e4fa563b149c4c45226dada80a818753b8ca53e94db7859248b2996025d0d3d43629f65ee5b4b49a5f806c5d51bfa389e293fc98a83c28", 0x90, 0x4000, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) fsopen(&(0x7f00000005c0)='ntfs\x00', 0x0) sendto$packet(r1, &(0x7f0000000600)="538520f0d6381c997c03b8bb6f16c9d6478a94ef71dcd9195fbd566ddde07c91682cc1ba0e48892755a34714041a13ae178eaf276ac1b05e1818fd327a21ff0b2b507d6c", 0x44, 0x2, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000700)='\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) 06:18:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x564}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) [ 183.775650] audit: type=1326 audit(1664864291.584:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4433 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c06854b19 code=0x0 06:18:11 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:18:11 executing program 5: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x7}, {0x0, 0xffffbbdf}, 0x4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@private, @loopback}, &(0x7f0000000080)=0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000100)={{0xffff, 0x44e33bdc}, {0xffff}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000140)={0x13}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="64e7283b8446a1b55230a4eddcc617aae3cc55e421fd0ff22a6f17d66bae6802ef2491a5dfefdaf38c213038b446a036ac6b49d2c3a6a96c3a14b0701f7cdb1991bd0815291ccf1d5aa6855ee272ca3cf2b3e4f22d", 0x55, 0x24000000, &(0x7f0000000540)={0x11, 0x1a, r1, 0x1, 0x6, 0x6, @local}, 0x14) accept(r0, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x80) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000680)={'team_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000780)={0x19}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c40), 0x400440, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000e80)={{0x7fff}, {0x7, 0x8}, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 06:18:11 executing program 6: r0 = syz_io_uring_setup(0x5a35, &(0x7f0000000000)={0x0, 0x24e6, 0x10, 0x3, 0x141}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r2, 0x29c, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) sendto(0xffffffffffffffff, &(0x7f0000000180)="77694bf2f4496515ea74f9fc017e536ec43ec72f26bcab656ed1ff2d5fc85fa6143f17461e75c8123997ed63ec39e902cc8658bebd6f3d675cade5f1d5f939b4", 0x40, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x4, 0x3}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x847) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x501080, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x266) 06:18:11 executing program 3: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x2, 0x5}, 0x7, 0x0, 0x10}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="7c5254fb58260a65d2aaab060b2f077a69a50e5e03525d93d08b97e22dc0d19b8b6973a916a248bce83c9a7b43d9a9cce1559ffa3b9b2de024ce01ce03da0aa9ea2048df1ad722e7165bce0a8ecbc2ae824aedd39b05b33e814627bffffa3c006881a2c78941d9d140599c73da481be37108e5bf69eb88e3cf39b9a6aa851ab1b94466784ddf960be97a34c7d55637f95ea2da69e7cbce85011e555c8082758299b2aa3ae94d04dbcea457fb2e1ca41f6fa2dad73f8eefdf9a5d5153dbcc77553c5d23fa775a05a581e223ae834a76103c0b1e9967e5f53eeabacdce2106681cfb9b72227270", 0xe6, 0x4044041}, 0x1000) 06:18:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd52a18c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dff0bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41e18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de18d12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f999fb7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ea}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6129aba5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbee9592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa77e8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e90bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cba87e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24040051) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x810) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) r3 = socket(0x0, 0x5, 0x1f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xe5ef979f7e75166a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x7, @fd_index=0x6, 0x1, 0x6, 0x4, 0x7, 0x0, {0x1}}, 0x0) VM DIAGNOSIS: 06:18:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff11003116f24 RCX=ffffffff81a9dcc9 RDX=ffff88800ffc5040 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888017d67000 RSP=ffff8880188b78e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88801b2fd4d0 R13=0000000000000001 R14=0000000000000000 R15=ffff88800f8b4000 RIP=ffffffff81460c30 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007faab2650900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faab1a876a0 CR3=000000000f070000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 494e4f544f4e4f4d 5f454352554f535f YMM01=0000000000000000 0000000000000000 4d49545f43494e4f 544f4e4f4d5f4543 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 93676790b081bbb2 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002b R11=0000000000000001 R12=000000000000002b R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faab1a48b90 CR3=0000000036af4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 58d818745f7d919f 4a4d2183221a57f8 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 00000000001227c8 YMM04=0000000000000000 0000000000000000 5a28ebb694f1ec64 000000000013e940 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 93676790b081bbb2 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000