Warning: Permanently added '[localhost]:57361' (ECDSA) to the list of known hosts. 2022/09/30 20:54:54 fuzzer started 2022/09/30 20:54:55 dialing manager at localhost:40535 syzkaller login: [ 40.976874] cgroup: Unknown subsys name 'net' [ 41.118026] cgroup: Unknown subsys name 'rlimit' 2022/09/30 20:55:10 syscalls: 206 2022/09/30 20:55:10 code coverage: enabled 2022/09/30 20:55:10 comparison tracing: enabled 2022/09/30 20:55:10 extra coverage: enabled 2022/09/30 20:55:10 setuid sandbox: enabled 2022/09/30 20:55:10 namespace sandbox: enabled 2022/09/30 20:55:10 Android sandbox: enabled 2022/09/30 20:55:10 fault injection: enabled 2022/09/30 20:55:10 leak checking: enabled 2022/09/30 20:55:10 net packet injection: enabled 2022/09/30 20:55:10 net device setup: enabled 2022/09/30 20:55:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 20:55:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 20:55:10 USB emulation: enabled 2022/09/30 20:55:10 hci packet injection: enabled 2022/09/30 20:55:10 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 20:55:10 802.15.4 emulation: enabled 2022/09/30 20:55:10 fetching corpus: 0, signal 0/0 (executing program) 2022/09/30 20:55:11 starting 8 fuzzer processes 20:55:11 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x51}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x40888) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c084) 20:55:11 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="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"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r10, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000007c80)=""/134) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000008140)={0x70, 0x16, &(0x7f0000007d40)="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"}) 20:55:11 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000880)={0x2, {0x2, 0x2, 0x81, 0x8d, 0x81, 0x2}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x10) 20:55:11 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r9, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r10 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r7}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r11, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x8085) 20:55:11 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) [ 56.569944] audit: type=1400 audit(1664571311.237:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:55:11 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_io_uring_complete(0x0) r4 = io_uring_setup(0x25d5, &(0x7f0000002000)={0x0, 0x19c5, 0x8, 0x0, 0x9c}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000002080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:55:11 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) r7 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0c) inotify_rm_watch(r1, r7) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x379f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x345}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004) 20:55:11 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002b80)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r5) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 57.808242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.812540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.814970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.820089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.822698] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.825747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.838473] Bluetooth: hci0: HCI_REQ-0x0c1a [ 57.876130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.884015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.886076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.888675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.890547] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.891737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.893212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.894860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.896794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.898156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.899589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.901017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.903955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.924603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.927330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.929934] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.931298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.933929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.935777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.936930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.938015] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.940527] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.942347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.942426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.946072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.947289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.949110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.950860] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 57.952242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.953320] Bluetooth: hci3: HCI_REQ-0x0c1a [ 57.958157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.959427] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.961268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.963804] Bluetooth: hci5: HCI_REQ-0x0c1a [ 57.967113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.969203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.969929] Bluetooth: hci4: HCI_REQ-0x0c1a [ 57.970797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.975583] Bluetooth: hci2: HCI_REQ-0x0c1a [ 57.983748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.994788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 57.996344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.998905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.005836] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.010469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.017485] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.029580] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.062319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.067191] Bluetooth: hci7: HCI_REQ-0x0c1a [ 59.888840] Bluetooth: hci0: command 0x0409 tx timeout [ 60.016453] Bluetooth: hci6: command 0x0409 tx timeout [ 60.017137] Bluetooth: hci5: command 0x0409 tx timeout [ 60.017672] Bluetooth: hci4: command 0x0409 tx timeout [ 60.018142] Bluetooth: hci2: command 0x0409 tx timeout [ 60.018665] Bluetooth: hci3: command 0x0409 tx timeout [ 60.080425] Bluetooth: hci1: command 0x0409 tx timeout [ 60.144503] Bluetooth: hci7: command 0x0409 tx timeout [ 61.936454] Bluetooth: hci0: command 0x041b tx timeout [ 62.064563] Bluetooth: hci3: command 0x041b tx timeout [ 62.065521] Bluetooth: hci2: command 0x041b tx timeout [ 62.066310] Bluetooth: hci4: command 0x041b tx timeout [ 62.067478] Bluetooth: hci5: command 0x041b tx timeout [ 62.068273] Bluetooth: hci6: command 0x041b tx timeout [ 62.128562] Bluetooth: hci1: command 0x041b tx timeout [ 62.192480] Bluetooth: hci7: command 0x041b tx timeout [ 63.984445] Bluetooth: hci0: command 0x040f tx timeout [ 64.112539] Bluetooth: hci6: command 0x040f tx timeout [ 64.113120] Bluetooth: hci5: command 0x040f tx timeout [ 64.113679] Bluetooth: hci4: command 0x040f tx timeout [ 64.114153] Bluetooth: hci2: command 0x040f tx timeout [ 64.114624] Bluetooth: hci3: command 0x040f tx timeout [ 64.176458] Bluetooth: hci1: command 0x040f tx timeout [ 64.240412] Bluetooth: hci7: command 0x040f tx timeout [ 66.032412] Bluetooth: hci0: command 0x0419 tx timeout [ 66.160508] Bluetooth: hci3: command 0x0419 tx timeout [ 66.160960] Bluetooth: hci2: command 0x0419 tx timeout [ 66.161399] Bluetooth: hci4: command 0x0419 tx timeout [ 66.161766] Bluetooth: hci5: command 0x0419 tx timeout [ 66.162148] Bluetooth: hci6: command 0x0419 tx timeout [ 66.224415] Bluetooth: hci1: command 0x0419 tx timeout [ 66.288417] Bluetooth: hci7: command 0x0419 tx timeout 20:56:04 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002b80)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r5) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:56:04 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002b80)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r5) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:56:04 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002b80)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r5) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:56:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002b80)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r5) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002b80)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002b40)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:05 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:56:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000002b00)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:22 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) pidfd_getfd(r1, r1, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:22 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x51}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x40888) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c084) 20:56:22 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:56:22 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000880)={0x2, {0x2, 0x2, 0x81, 0x8d, 0x81, 0x2}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x10) 20:56:23 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_io_uring_complete(0x0) r4 = io_uring_setup(0x25d5, &(0x7f0000002000)={0x0, 0x19c5, 0x8, 0x0, 0x9c}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000002080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:23 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="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"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r10, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000007c80)=""/134) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000008140)={0x70, 0x16, &(0x7f0000007d40)="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"}) 20:56:23 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) r7 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0c) inotify_rm_watch(r1, r7) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x379f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x345}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004) 20:56:23 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r9, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r10 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r7}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r11, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x8085) 20:56:38 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000880)={0x2, {0x2, 0x2, 0x81, 0x8d, 0x81, 0x2}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x10) 20:56:38 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r9, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r10 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r7}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r11, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x8085) 20:56:38 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xe73, 0x3, 0x4, 0x3, 0x80000000}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:38 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="64a4155948644d97b810ae0e2db700f0eb30743497ba785b86bc568e061755c2684bdbc287e6a7867fef5448223dd25b54ed515c54373df96115b35416e9f88a66c1e0abb27e24caba0c3e9f28af25d2201e2819b08f29f870708cf5e5dd41e7a446069ecc9d79c8482eac1b17a7bc7976b8cac06a4224dce4b91cd911e57758c58ce47076c6aa21f52772f6646289674d7b2e9c5d7dd4f24d086ae00d8232d12a53a6f87b610719b49f212ff8d84a31be025f3fd7381146b57d22fc53a2c2e16e1040e2cd8b7acc92c4f19a45b40305a998e95d12539589151b36ca43f2e0e56669f67452dfc1ef5a4a9f5099550b0379f2c69193c277e2682c901768d9d4eb529e374cfba371a847553886c8a83bd6758a5551167016d0a76bd33d86ce5caa88b299edfdcb885c6868dff3060c810c6c85dbe95a08a44e0e69d23c0043b247ab2866bd4c02ad84ef5b2561d75af8611443fbfa719644f94e08d9fdaea66e02351b951c253fb98de7b7ab47cd8133e38fbd7bc47847131bda071170889d49f6a6f69382e57be8ad06d0b717a3ec7822c3ca852ff3df761122f6c47c918b3107bc4be53f048f4e031471b8d4795d4fa91835356d7cf80b6e7dc8558be2a5d50de00f961ab8c2ca9a9a4424c9c470fdfd346b4836d613e6746d31bab1f5d2883e656c57dbdda150c1a24982decb10cbacb0b5702f1df008318efaeebc6629786d4dfd7fe42cfdfa28c5287b0107a6b914b7c607980bb2098bbe43d7481c62e998e7fa0f2d10dfb84d7e8e70f300a1236974e9f8de38d61f5e701496370e6c8edf130ae23a523e9558a693a88f59131a3925d8960b0c6c558953ac1cca678dce5c052a9c435fbe2dfc0afc1707b4af975932aa502dd79e9a3f493d45b25e22439c2f6a7f02aa1fce920b2e5033ae5af99ee4f753e8b9237549c2b924cd009b76dee4a37638ae18a9311d6196ed2bb65d5226e46495cf2d88bf74a0679db2ba45f3f01ed4010bf5c1549c2ae46c329f1f4bc6aacf015ddd9faf53b61e36ae3bc8c38a18dbbffd8034db9cdf271f137e3ad6ba9309b459b2939dca0c2a9060fde2f60056adec91240abdd1b02ae794b05b376fac3d561d3e43afa5e725cfa3c9872824f7a8d424857f9c4fafdd1cfd1f679330d0582180a568cd69b559b3e5e08789d26a5d4abdf9c679a80f64308d1a7008d1d99c75fcca21fd8436ab11682eff6dd85c2491ae7e159cde8b32e473a26443e75b7bb3b4758fd568de399dd511591f0ccb974df85ffa02a828314cbfe02eaf210b54d90b4f6dddfbde6b507761a2a4c64ab5a0ea67a865a5e81bfc27f9fc8b21df9ee7cef212f73af75e449399b8936dbc018ad589ba6f761fe8351fe69ed5b06ce24c491e119b5cae9b6c0a7c96c641592db57d458ba57f0acdc223265e8c8d0f48cf9e739156d2605bb8ab4586f6"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r10, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000007c80)=""/134) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000008140)={0x70, 0x16, &(0x7f0000007d40)="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"}) 20:56:38 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_io_uring_complete(0x0) r4 = io_uring_setup(0x25d5, &(0x7f0000002000)={0x0, 0x19c5, 0x8, 0x0, 0x9c}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000002080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:38 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) r7 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0c) inotify_rm_watch(r1, r7) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x379f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x345}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004) 20:56:38 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:56:38 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x51}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x40888) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c084) 20:56:38 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_io_uring_complete(0x0) r4 = io_uring_setup(0x25d5, &(0x7f0000002000)={0x0, 0x19c5, 0x8, 0x0, 0x9c}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000002080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:38 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:38 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) r7 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0c) inotify_rm_watch(r1, r7) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x379f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x345}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004) 20:56:39 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{}, "c6bef85436258a2a", "b33baae4c606a7bb096d98f25012d8be", "585ffd52", "83e9eced4ed2f898"}, 0x28) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:50 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000880)={0x2, {0x2, 0x2, 0x81, 0x8d, 0x81, 0x2}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x10) 20:56:50 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) r7 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0c) inotify_rm_watch(r1, r7) syz_io_uring_complete(0x0) 20:56:50 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="64a4155948644d97b810ae0e2db700f0eb30743497ba785b86bc568e061755c2684bdbc287e6a7867fef5448223dd25b54ed515c54373df96115b35416e9f88a66c1e0abb27e24caba0c3e9f28af25d2201e2819b08f29f870708cf5e5dd41e7a446069ecc9d79c8482eac1b17a7bc7976b8cac06a4224dce4b91cd911e57758c58ce47076c6aa21f52772f6646289674d7b2e9c5d7dd4f24d086ae00d8232d12a53a6f87b610719b49f212ff8d84a31be025f3fd7381146b57d22fc53a2c2e16e1040e2cd8b7acc92c4f19a45b40305a998e95d12539589151b36ca43f2e0e56669f67452dfc1ef5a4a9f5099550b0379f2c69193c277e2682c901768d9d4eb529e374cfba371a847553886c8a83bd6758a5551167016d0a76bd33d86ce5caa88b299edfdcb885c6868dff3060c810c6c85dbe95a08a44e0e69d23c0043b247ab2866bd4c02ad84ef5b2561d75af8611443fbfa719644f94e08d9fdaea66e02351b951c253fb98de7b7ab47cd8133e38fbd7bc47847131bda071170889d49f6a6f69382e57be8ad06d0b717a3ec7822c3ca852ff3df761122f6c47c918b3107bc4be53f048f4e031471b8d4795d4fa91835356d7cf80b6e7dc8558be2a5d50de00f961ab8c2ca9a9a4424c9c470fdfd346b4836d613e6746d31bab1f5d2883e656c57dbdda150c1a24982decb10cbacb0b5702f1df008318efaeebc6629786d4dfd7fe42cfdfa28c5287b0107a6b914b7c607980bb2098bbe43d7481c62e998e7fa0f2d10dfb84d7e8e70f300a1236974e9f8de38d61f5e701496370e6c8edf130ae23a523e9558a693a88f59131a3925d8960b0c6c558953ac1cca678dce5c052a9c435fbe2dfc0afc1707b4af975932aa502dd79e9a3f493d45b25e22439c2f6a7f02aa1fce920b2e5033ae5af99ee4f753e8b9237549c2b924cd009b76dee4a37638ae18a9311d6196ed2bb65d5226e46495cf2d88bf74a0679db2ba45f3f01ed4010bf5c1549c2ae46c329f1f4bc6aacf015ddd9faf53b61e36ae3bc8c38a18dbbffd8034db9cdf271f137e3ad6ba9309b459b2939dca0c2a9060fde2f60056adec91240abdd1b02ae794b05b376fac3d561d3e43afa5e725cfa3c9872824f7a8d424857f9c4fafdd1cfd1f679330d0582180a568cd69b559b3e5e08789d26a5d4abdf9c679a80f64308d1a7008d1d99c75fcca21fd8436ab11682eff6dd85c2491ae7e159cde8b32e473a26443e75b7bb3b4758fd568de399dd511591f0ccb974df85ffa02a828314cbfe02eaf210b54d90b4f6dddfbde6b507761a2a4c64ab5a0ea67a865a5e81bfc27f9fc8b21df9ee7cef212f73af75e449399b8936dbc018ad589ba6f761fe8351fe69ed5b06ce24c491e119b5cae9b6c0a7c96c641592db57d458ba57f0acdc223265e8c8d0f48cf9e739156d2605bb8ab4586f6"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r10, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000007c80)=""/134) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000008140)={0x70, 0x16, &(0x7f0000007d40)="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"}) 20:56:50 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:56:50 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x51}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x40888) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c084) 20:56:50 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r9, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r10 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r7}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r11, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x8085) 20:56:50 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:50 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_io_uring_complete(0x0) io_uring_setup(0x25d5, &(0x7f0000002000)={0x0, 0x19c5, 0x8, 0x0, 0x9c}) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:50 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:50 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:50 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:56:50 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:50 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0c) syz_io_uring_complete(0x0) 20:56:50 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:56:50 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:56:50 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="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"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r9, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r9, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000007c80)=""/134) 20:57:05 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:57:05 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) r6 = fork() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r6) syz_io_uring_complete(0x0) 20:57:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:05 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x51}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x40888) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) 20:57:05 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001f40)=r3, 0x1) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:05 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="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"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r9, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r9, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000007c80)=""/134) 20:57:05 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000880)={0x2, {0x2, 0x2, 0x81, 0x8d, 0x81, 0x2}}) 20:57:05 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r8, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r9 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r6}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)) 20:57:05 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) timer_gettime(0x0, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:05 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) fork() syz_io_uring_complete(0x0) 20:57:05 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:05 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:57:05 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:06 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x51}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x40888) socket$nl_generic(0x10, 0x3, 0x10) 20:57:06 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="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"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r8, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r8, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) 20:57:06 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r8, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r9 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r6}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)) 20:57:06 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:06 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rw\x00'}, 0x9) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:06 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) fork() syz_io_uring_complete(0x0) 20:57:06 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000880)={0x2, {0x2, 0x2, 0x81, 0x8d, 0x81, 0x2}}) 20:57:06 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:06 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) [ 183.664738] Bluetooth: hci0: command 0x0406 tx timeout [ 183.665963] Bluetooth: hci4: command 0x0406 tx timeout [ 183.667246] Bluetooth: hci2: command 0x0406 tx timeout [ 183.668419] Bluetooth: hci5: command 0x0406 tx timeout [ 183.669598] Bluetooth: hci6: command 0x0406 tx timeout [ 183.670824] Bluetooth: hci1: command 0x0406 tx timeout [ 183.671945] Bluetooth: hci3: command 0x0406 tx timeout [ 183.673120] Bluetooth: hci7: command 0x0406 tx timeout 20:57:18 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) fork() syz_io_uring_complete(0x0) 20:57:18 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0xd, 0x1000}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:57:18 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) 20:57:18 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r8, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r9 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r6}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) socketpair(0x15, 0x6, 0x20, &(0x7f00000006c0)) 20:57:18 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:18 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x40, &(0x7f0000000000)=@generic={0x0, 0x2, 0x38, "709ea0a4", "236149848d1e9b6a37b0e2c04f70ef3ddf3fcb736861beb7661915fb8210969a415c108584d7bec84737ade7041fc31b540cc96145454ad9"}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x14, 0x1b, 0xe0, &(0x7f0000000040)="64a4155948644d97b810ae0e2db700f0eb30743497ba785b86bc568e061755c2684bdbc287e6a7867fef5448223dd25b54ed515c54373df96115b35416e9f88a66c1e0abb27e24caba0c3e9f28af25d2201e2819b08f29f870708cf5e5dd41e7a446069ecc9d79c8482eac1b17a7bc7976b8cac06a4224dce4b91cd911e57758c58ce47076c6aa21f52772f6646289674d7b2e9c5d7dd4f24d086ae00d8232d12a53a6f87b610719b49f212ff8d84a31be025f3fd7381146b57d22fc53a2c2e16e1040e2cd8b7acc92c4f19a45b40305a998e95d12539589151b36ca43f2e0e56669f67452dfc1ef5a4a9f5099550b0379f2c69193c277e2682c901768d9d4eb529e374cfba371a847553886c8a83bd6758a5551167016d0a76bd33d86ce5caa88b299edfdcb885c6868dff3060c810c6c85dbe95a08a44e0e69d23c0043b247ab2866bd4c02ad84ef5b2561d75af8611443fbfa719644f94e08d9fdaea66e02351b951c253fb98de7b7ab47cd8133e38fbd7bc47847131bda071170889d49f6a6f69382e57be8ad06d0b717a3ec7822c3ca852ff3df761122f6c47c918b3107bc4be53f048f4e031471b8d4795d4fa91835356d7cf80b6e7dc8558be2a5d50de00f961ab8c2ca9a9a4424c9c470fdfd346b4836d613e6746d31bab1f5d2883e656c57dbdda150c1a24982decb10cbacb0b5702f1df008318efaeebc6629786d4dfd7fe42cfdfa28c5287b0107a6b914b7c607980bb2098bbe43d7481c62e998e7fa0f2d10dfb84d7e8e70f300a1236974e9f8de38d61f5e701496370e6c8edf130ae23a523e9558a693a88f59131a3925d8960b0c6c558953ac1cca678dce5c052a9c435fbe2dfc0afc1707b4af975932aa502dd79e9a3f493d45b25e22439c2f6a7f02aa1fce920b2e5033ae5af99ee4f753e8b9237549c2b924cd009b76dee4a37638ae18a9311d6196ed2bb65d5226e46495cf2d88bf74a0679db2ba45f3f01ed4010bf5c1549c2ae46c329f1f4bc6aacf015ddd9faf53b61e36ae3bc8c38a18dbbffd8034db9cdf271f137e3ad6ba9309b459b2939dca0c2a9060fde2f60056adec91240abdd1b02ae794b05b376fac3d561d3e43afa5e725cfa3c9872824f7a8d424857f9c4fafdd1cfd1f679330d0582180a568cd69b559b3e5e08789d26a5d4abdf9c679a80f64308d1a7008d1d99c75fcca21fd8436ab11682eff6dd85c2491ae7e159cde8b32e473a26443e75b7bb3b4758fd568de399dd511591f0ccb974df85ffa02a828314cbfe02eaf210b54d90b4f6dddfbde6b507761a2a4c64ab5a0ea67a865a5e81bfc27f9fc8b21df9ee7cef212f73af75e449399b8936dbc018ad589ba6f761fe8351fe69ed5b06ce24c491e119b5cae9b6c0a7c96c641592db57d458ba57f0acdc223265e8c8d0f48cf9e739156d2605bb8ab4586f6"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/160, 0xa0}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/182, 0xb6}], 0x4, &(0x7f00000031c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/122, 0x7a}, {&(0x7f0000004480)=""/4, 0x4}, {&(0x7f00000044c0)=""/36, 0x24}, {&(0x7f0000004500)=""/106, 0x6a}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/77, 0x4d}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/63, 0x3f}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/130, 0x82}], 0x3, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/216, 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/210, 0xd2}, {&(0x7f0000005e00)=""/98, 0x62}, {&(0x7f0000005e80)=""/64, 0x40}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/176, 0xb0}, {&(0x7f0000006f80)=""/172, 0xac}, {&(0x7f0000007040)=""/198, 0xc6}], 0x7, &(0x7f00000071c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x9, 0x0, &(0x7f0000007540)) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000007580)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000075c0)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000007600)=@conn_svc_rsp={0x0, 0x0, 0xa, "180037cf", {0x3, 0x103, 0x0, 0x6, 0x1f, 0x4, 0x26}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000007640)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x10001) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000007680)={0x5, 0x7, 0x1ff, 0x3}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000076c0), 0x4000, 0x0) ioctl$KDGKBMODE(r8, 0x4b44, &(0x7f0000007700)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000007740)=0x80000001) ioctl$TIOCGPTPEER(r8, 0x5441, 0x8) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000007b80)={0x3, 0x0, 0x16, 0x0, 0x54, &(0x7f0000007780)}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000007bc0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000007c40)={0x9, &(0x7f0000007c00)=[{0x8, 0x100}, {0xb2c, 0x3f}, {0x1, 0x20}, {0x7, 0xcac}, {0x56, 0x40}, {0x97d2, 0x4}, {0x1815, 0x4e3}, {0x7b6, 0xffff}, {0x4, 0x6}]}) 20:57:18 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:18 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 20:57:18 executing program 6: timer_create(0x6, &(0x7f0000000000)={0x0, 0x12, 0x1}, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:18 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) [ 184.176426] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 184.177015] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.177451] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.178015] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 184.178655] Call Trace: [ 184.178859] [ 184.179040] __schedule+0x893/0x2470 [ 184.179373] ? io_schedule_timeout+0x150/0x150 [ 184.179725] ? do_raw_spin_lock+0x121/0x260 [ 184.180061] ? rwlock_bug.part.0+0x90/0x90 [ 184.180413] schedule+0xda/0x1b0 [ 184.180675] rescuer_thread+0x851/0xdb0 [ 184.181005] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.181390] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.181972] ? lockdep_hardirqs_on+0x79/0x100 [ 184.182792] ? worker_thread+0x1260/0x1260 [ 184.183128] kthread+0x2ed/0x3a0 [ 184.183411] ? kthread_complete_and_exit+0x40/0x40 [ 184.184086] ret_from_fork+0x22/0x30 [ 184.184397] [ 184.184577] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 184.185036] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.185451] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.186004] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 184.186666] Call Trace: [ 184.186865] [ 184.187042] __schedule+0x893/0x2470 [ 184.187339] ? io_schedule_timeout+0x150/0x150 [ 184.187725] ? do_raw_spin_lock+0x121/0x260 [ 184.188057] ? rwlock_bug.part.0+0x90/0x90 [ 184.188405] schedule+0xda/0x1b0 [ 184.188680] rescuer_thread+0x851/0xdb0 [ 184.188990] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.189391] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.189770] ? lockdep_hardirqs_on+0x79/0x100 [ 184.190116] ? worker_thread+0x1260/0x1260 [ 184.190466] kthread+0x2ed/0x3a0 [ 184.190737] ? kthread_complete_and_exit+0x40/0x40 [ 184.191116] ret_from_fork+0x22/0x30 [ 184.191440] [ 184.191624] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 184.192112] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.192559] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.193123] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 184.193764] Call Trace: [ 184.193955] [ 184.194137] __schedule+0x893/0x2470 [ 184.194465] ? io_schedule_timeout+0x150/0x150 [ 184.194829] ? do_raw_spin_lock+0x121/0x260 [ 184.195163] ? rwlock_bug.part.0+0x90/0x90 [ 184.195526] schedule+0xda/0x1b0 [ 184.195793] rescuer_thread+0x851/0xdb0 [ 184.196104] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.196501] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.196889] ? lockdep_hardirqs_on+0x79/0x100 [ 184.197242] ? worker_thread+0x1260/0x1260 [ 184.197580] kthread+0x2ed/0x3a0 [ 184.197836] ? kthread_complete_and_exit+0x40/0x40 [ 184.198195] ret_from_fork+0x22/0x30 [ 184.198501] [ 184.198683] INFO: task netns:6 blocked for more than 143 seconds. [ 184.199124] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.199521] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.200064] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 184.200676] Call Trace: [ 184.200866] [ 184.201035] __schedule+0x893/0x2470 [ 184.201317] ? io_schedule_timeout+0x150/0x150 [ 184.201670] ? do_raw_spin_lock+0x121/0x260 [ 184.201991] ? rwlock_bug.part.0+0x90/0x90 [ 184.202311] schedule+0xda/0x1b0 [ 184.202586] rescuer_thread+0x851/0xdb0 [ 184.202899] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.203260] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.203644] ? lockdep_hardirqs_on+0x79/0x100 [ 184.203974] ? worker_thread+0x1260/0x1260 [ 184.204291] kthread+0x2ed/0x3a0 [ 184.204562] ? kthread_complete_and_exit+0x40/0x40 [ 184.204925] ret_from_fork+0x22/0x30 [ 184.205211] [ 184.205401] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 184.205875] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.206249] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.206807] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 184.207415] Workqueue: 0x0 (kblockd) [ 184.207700] Call Trace: [ 184.207887] [ 184.208059] __schedule+0x893/0x2470 [ 184.208341] ? io_schedule_timeout+0x150/0x150 [ 184.208707] schedule+0xda/0x1b0 [ 184.208964] worker_thread+0x15f/0x1260 [ 184.209269] ? process_one_work+0x16a0/0x16a0 [ 184.209621] kthread+0x2ed/0x3a0 [ 184.209878] ? kthread_complete_and_exit+0x40/0x40 [ 184.210239] ret_from_fork+0x22/0x30 [ 184.210544] [ 184.210729] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 184.211220] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.211620] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.212163] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 184.212773] Call Trace: [ 184.212962] [ 184.213133] __schedule+0x893/0x2470 [ 184.213435] ? io_schedule_timeout+0x150/0x150 [ 184.213771] ? do_raw_spin_lock+0x121/0x260 [ 184.214091] ? rwlock_bug.part.0+0x90/0x90 [ 184.214428] schedule+0xda/0x1b0 [ 184.214701] rescuer_thread+0x851/0xdb0 [ 184.215000] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.215384] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.215749] ? lockdep_hardirqs_on+0x79/0x100 [ 184.216078] ? worker_thread+0x1260/0x1260 [ 184.216407] kthread+0x2ed/0x3a0 [ 184.216661] ? kthread_complete_and_exit+0x40/0x40 [ 184.217024] ret_from_fork+0x22/0x30 [ 184.217313] [ 184.217505] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 184.218001] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.218392] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.218933] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 184.219539] Call Trace: [ 184.219729] [ 184.219902] __schedule+0x893/0x2470 [ 184.220184] ? io_schedule_timeout+0x150/0x150 [ 184.220541] ? mark_held_locks+0x9e/0xe0 [ 184.220844] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.221213] schedule+0xda/0x1b0 [ 184.221487] rcu_tasks_one_gp+0x3db/0xc10 [ 184.221807] rcu_tasks_kthread+0x80/0xa0 [ 184.222104] ? rcu_tasks_postscan+0x10/0x10 [ 184.222438] kthread+0x2ed/0x3a0 [ 184.222709] ? kthread_complete_and_exit+0x40/0x40 [ 184.223069] ret_from_fork+0x22/0x30 [ 184.223378] [ 184.223553] INFO: task kworker/0:1:12 blocked for more than 143 seconds. [ 184.224025] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.224422] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.224965] task:kworker/0:1 state:I stack:28272 pid:12 ppid:2 flags:0x00004000 [ 184.225574] Workqueue: 0x0 (cgroup_destroy) [ 184.225903] Call Trace: [ 184.226090] [ 184.226263] __schedule+0x893/0x2470 [ 184.226569] ? io_schedule_timeout+0x150/0x150 [ 184.226912] ? rwlock_bug.part.0+0x90/0x90 [ 184.227227] schedule+0xda/0x1b0 [ 184.227500] worker_thread+0x15f/0x1260 [ 184.227807] ? __kthread_parkme+0x15a/0x220 [ 184.228122] ? process_one_work+0x16a0/0x16a0 [ 184.228472] kthread+0x2ed/0x3a0 [ 184.228726] ? kthread_complete_and_exit+0x40/0x40 [ 184.229087] ret_from_fork+0x22/0x30 [ 184.229395] [ 184.229573] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 184.230045] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.230439] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.230993] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 184.231607] Workqueue: 0x0 (events_highpri) [ 184.231935] Call Trace: [ 184.232122] [ 184.232292] __schedule+0x893/0x2470 [ 184.232606] ? io_schedule_timeout+0x150/0x150 [ 184.232959] schedule+0xda/0x1b0 [ 184.233230] worker_thread+0x15f/0x1260 [ 184.233580] ? process_one_work+0x16a0/0x16a0 [ 184.233927] kthread+0x2ed/0x3a0 [ 184.234189] ? kthread_complete_and_exit+0x40/0x40 [ 184.234587] ret_from_fork+0x22/0x30 [ 184.234900] [ 184.235083] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 184.235601] Not tainted 6.0.0-rc7-next-20220929 #1 [ 184.235999] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.236586] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 184.237217] Call Trace: [ 184.237431] [ 184.237608] __schedule+0x893/0x2470 [ 184.237898] ? io_schedule_timeout+0x150/0x150 [ 184.238250] ? do_raw_spin_lock+0x121/0x260 [ 184.238599] ? rwlock_bug.part.0+0x90/0x90 [ 184.238933] schedule+0xda/0x1b0 [ 184.239189] rescuer_thread+0x851/0xdb0 [ 184.239506] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.239871] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.240231] ? lockdep_hardirqs_on+0x79/0x100 [ 184.240583] ? worker_thread+0x1260/0x1260 [ 184.240899] kthread+0x2ed/0x3a0 [ 184.241155] ? kthread_complete_and_exit+0x40/0x40 [ 184.241535] ret_from_fork+0x22/0x30 [ 184.241835] [ 184.242099] [ 184.242099] Showing all locks held in the system: [ 184.242577] 1 lock held by rcu_tasks_kthre/11: [ 184.242916] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 184.243639] 1 lock held by khungtaskd/25: [ 184.243943] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 184.244653] 2 locks held by kworker/u4:2/39: [ 184.244974] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.245750] #1: ffff88800b06fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.246535] 1 lock held by in:imklog/187: [ 184.246839] 3 locks held by syz-executor.4/297: [ 184.247166] 3 locks held by syz-executor.6/301: [ 184.247525] 2 locks held by kworker/u4:4/329: [ 184.247846] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.248603] #1: ffff8880365c7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.249388] 2 locks held by kworker/u4:6/336: [ 184.249707] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.250468] #1: ffff88801b197db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.251252] 2 locks held by kworker/u4:7/340: [ 184.251591] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.252333] #1: ffff888017fbfdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.253121] 2 locks held by kworker/u4:9/359: [ 184.253457] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.254202] #1: ffff88801a57fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.254992] 2 locks held by kworker/u4:10/548: [ 184.255321] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.256079] #1: ffff88800fc87db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.256864] 2 locks held by kworker/u4:11/4071: [ 184.257193] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.258006] #1: ffff888037cc7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.258806] 2 locks held by kworker/u4:13/4079: [ 184.259142] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.259893] #1: ffff8880383ffdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.260675] 2 locks held by kworker/u4:14/4083: [ 184.261007] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 184.261758] #1: ffff888037dafdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 184.262542] 1 lock held by modprobe/4361: [ 184.262844] 1 lock held by syz-executor.7/4392: [ 184.263175] 1 lock held by modprobe/4381: [ 184.263491] 1 lock held by modprobe/4391: [ 184.263785] 1 lock held by modprobe/4394: [ 184.264083] 1 lock held by modprobe/4397: [ 184.264396] 1 lock held by modprobe/4399: [ 184.264692] [ 184.264821] ============================================= [ 184.264821] 20:57:18 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)) syz_io_uring_complete(0x0) 20:57:19 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x1f, 0xce, 0xda1, 0xfffffffd, 0x3f, "7488d82c570f953465adf236b0d183df941d6c", 0x6, 0x6292}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xfffff000, 0x9be, 0x4, 0x6, 0x1a, "f3bb98f48b290ed6af6f3f37dad20089dceb43"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x400, 0x6, 0x3ff, 0x1000, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffa, 0x402442) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket(0x11, 0x1, 0x5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/211, &(0x7f0000000200)=0xd3) socket(0x2a, 0x80000, 0x7ff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)="80cc81cbbc75741fe79a2190e5f1a71dddffb441877d144b1113cb98e5f14a1f6097399604222623823ee60a289b9d5ba39e32ffb480a77fe342145389acfa530e93f3f55fb989cd4bd10b9416c0ae63b9e8aedf50772417e1455500b67e652274975e0e51044b7fa6e81ffd33ef11aebb3f43528fe9ea2dcca5a2ef150a75dafdd2ace8a9447c7537946e043dc70f5c98fb69ef8662ae55d95ff0108b34d628e48569ed51936898f33fd93593fea3b73274a9a131a28c9eaed662b3c95ee9ec2baadd8c3f2ee7bb947ca8574ea7bc2c5384d541af89260dcc3eda7a25f64ce294552bdcc17080efa829ab999bf9a189e01d7f752b8a3684") r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x8, 0x800, 0x3, 0x3}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24080091}, 0x0) 20:57:19 executing program 0: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001800}, 0x4010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xefa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r6 = getpid() sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) sched_rr_get_interval(r6, &(0x7f0000000800)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 20:57:19 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/44, 0x2c}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/197, 0xc5}, {&(0x7f0000001b00)=""/66, 0x42}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/177, 0xb1}], 0x1}}], 0x3, 0x2040, 0x0) syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:19 executing program 6: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 20:57:19 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "94bb67786fd33ddd", "974f48bb290911d670f8f37576679298", "439b4772", "39944401a57f0a3e"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x33, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x584ffa54fa912912, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x9a39, 0x0, &(0x7f0000000280)=[r0]}, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f00000021c0), 0x8b, 0x0) 20:57:19 executing program 7: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(r1, r0) r2 = syz_io_uring_complete(0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x88002) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x80000440) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3, 0x8, 0x2, 0xfffc}}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)) syz_io_uring_complete(0x0) 20:57:19 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket(0x25, 0x5, 0x8000) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x2b, 0x800, 0x0) socketpair(0xa, 0x3, 0xc00, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf896}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4048005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="41775e81c6ff"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r8, 0x2f, 0x0, 0x0, 0x0, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x9, 0x7}}) r9 = io_uring_setup(0x6bd2, &(0x7f0000000580)={0x0, 0xb252, 0x10, 0x1, 0x2a8, 0x0, r6}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) 20:57:19 executing program 2: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a8f30e0a4ace"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044881}, 0x20088800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x20048001) r1 = socket(0x8, 0x800, 0xab81) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) r7 = pidfd_getfd(r0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)) 20:57:19 executing program 6: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x24004000) VM DIAGNOSIS: 20:57:19 Registers: info registers vcpu 0 RAX=ffff88800ebb6000 RBX=0000000000000001 RCX=1ffff11001fdda1f RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88800feed180 RBP=ffff88806ce09ca8 RSP=ffff88806ce09c20 R8 =0000000000000005 R9 =0000002ae21fbc99 R10=0000000080010001 R11=0000000000000001 R12=ffff88800feed0c0 R13=ffffffff85b07b01 R14=0000002ae21fbc99 R15=0000000000000000 RIP=ffffffff81262016 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7ad4723900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7ad3bbd350 CR3=000000000ea1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 973b66a78cce447b 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000200000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f62caea9270 CR3=000000001da32000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000