Warning: Permanently added '[localhost]:54700' (ECDSA) to the list of known hosts. 2022/10/01 04:39:44 fuzzer started 2022/10/01 04:39:44 dialing manager at localhost:35095 syzkaller login: [ 46.619236] cgroup: Unknown subsys name 'net' [ 46.695678] cgroup: Unknown subsys name 'rlimit' 2022/10/01 04:40:00 syscalls: 206 2022/10/01 04:40:00 code coverage: enabled 2022/10/01 04:40:00 comparison tracing: enabled 2022/10/01 04:40:00 extra coverage: enabled 2022/10/01 04:40:00 setuid sandbox: enabled 2022/10/01 04:40:00 namespace sandbox: enabled 2022/10/01 04:40:00 Android sandbox: enabled 2022/10/01 04:40:00 fault injection: enabled 2022/10/01 04:40:00 leak checking: enabled 2022/10/01 04:40:00 net packet injection: enabled 2022/10/01 04:40:00 net device setup: enabled 2022/10/01 04:40:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 04:40:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 04:40:00 USB emulation: enabled 2022/10/01 04:40:00 hci packet injection: enabled 2022/10/01 04:40:00 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 04:40:00 802.15.4 emulation: enabled 2022/10/01 04:40:00 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 04:40:01 starting 8 fuzzer processes 04:40:01 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002440)) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}}, 0x0) 04:40:01 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x7fff}, @mss={0x2, 0x5}], 0x2) r6 = epoll_create1(0x0) getgroups(0x7, &(0x7f0000000900)=[0xee00, 0xee00, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6, {0x0, r7}}, './file0\x00'}) 04:40:01 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r12, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r13, 0x40046210, &(0x7f00000028c0)) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r14, 0x8008330e, &(0x7f0000002940)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) setsockopt$inet_tcp_buf(r15, 0x6, 0x1c, &(0x7f00000029c0)="a4b7459981f6b08bf78963c02a651e88900607bca97c0c9b667de9a968cddcbde50aae7c49f52b8b4061403f670b8f61ccff5c29a3338db7689cb4eb89eecd36e8ee018e282e3d766bf70de1222d44f80d440d772b5ee5eb1be7a9ceda51d9d212c6e6d7be68c0", 0x67) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) [ 63.256322] audit: type=1400 audit(1664599201.838:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:40:01 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r9}}, './file0\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r10, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) statx(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000001cc0)={0xec, 0x0, &(0x7f0000000bc0)=[@increfs_done, @dead_binder_done, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x6, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/67, 0x43, 0x6, 0x33}, @flat=@handle={0x73682a85, 0x110b, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x25}}, &(0x7f0000000b80)={0x0, 0x28, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x1000, 0x0, &(0x7f0000000cc0)="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"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0x0, r13}}, './file0\x00'}) 04:40:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000ac0)='ceph\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='/\x00', 0xfffffffffffffffb) syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0xbe, 0x1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="12ec7d6cf7578be26681efbda45c00de0ea7b387d31514198d6e18ad2be80850a581bc6733cff448899646f2f082d1473a92522a894bdea348a0d0ec8f0bee0f1affb21e37a23ba50c9024dc51319e0225d8f8adb0df1e0ef3ded487cfc372c18917e5cc54bce44d40a3ca223e6981362eca0ec2004b2e2a93d22a26bc54b0846f1dbd002a29be5601e64ffdc9aec14d7762f9335b76779c57db33f436c26ea2ca2ae599a2b393b37bc67806bcc0cbb369e3e27ae8f61f572f6a10c0315d6412132e5422efe013afdb90d8e7a56c000b70d7a156fb", 0xd5, 0x7}], 0x480, &(0x7f0000000d40)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x30}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/\x00'}}, {@audit}]}) r6 = request_key(&(0x7f0000000dc0)='encrypted\x00', &(0x7f0000000e00)={'syz', 0x2}, &(0x7f0000000e40)='\x00', r3) keyctl$link(0x8, r6, r4) 04:40:01 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r10, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r11 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r11}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r12, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001340)={0x50, 0x0, &(0x7f0000001240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001180)={@fda={0x66646185, 0x6, 0x2, 0x17}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r13}}, &(0x7f0000001200)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x3}, @enter_looper], 0x41, 0x0, &(0x7f00000012c0)="07949aa1e6ccd786b679ef79e8f013f3b228bea8d1ebd659224615260760dc87ff24815c84c27dbb9eea9c013525bf1543564aa660be966613227a09d0c74c2643"}) 04:40:01 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) 04:40:01 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xfca6227b7db8ce16}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) [ 64.579003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.582564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.583883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.586651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.588559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.590844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.595859] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.646834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.648784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.650840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.653877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.655234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.661859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.669257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.671342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.672899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.679148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.680228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.680345] Bluetooth: hci1: HCI_REQ-0x0c1a [ 64.682806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.683915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.687317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.690124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.691558] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.693726] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.695192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.696303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.703828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.706034] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.707457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.708271] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.708592] Bluetooth: hci5: HCI_REQ-0x0c1a [ 64.710464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.711705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.715133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.716631] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.717904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.727394] Bluetooth: hci3: HCI_REQ-0x0c1a [ 64.733639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.738343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.743195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.747275] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.769640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.771160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.780109] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.781736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.795205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.796670] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.803229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.804169] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.816171] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 64.817191] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 64.818509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.819888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.838122] Bluetooth: hci6: HCI_REQ-0x0c1a [ 64.838905] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.607328] Bluetooth: hci0: command 0x0409 tx timeout [ 66.734035] Bluetooth: hci3: command 0x0409 tx timeout [ 66.734692] Bluetooth: hci5: command 0x0409 tx timeout [ 66.735286] Bluetooth: hci1: command 0x0409 tx timeout [ 66.735775] Bluetooth: hci4: command 0x0409 tx timeout [ 66.798990] Bluetooth: hci2: command 0x0409 tx timeout [ 66.863064] Bluetooth: hci7: command 0x0409 tx timeout [ 66.927008] Bluetooth: hci6: command 0x0409 tx timeout [ 68.654749] Bluetooth: hci0: command 0x041b tx timeout [ 68.782120] Bluetooth: hci4: command 0x041b tx timeout [ 68.782894] Bluetooth: hci1: command 0x041b tx timeout [ 68.784103] Bluetooth: hci5: command 0x041b tx timeout [ 68.784824] Bluetooth: hci3: command 0x041b tx timeout [ 68.847112] Bluetooth: hci2: command 0x041b tx timeout [ 68.911066] Bluetooth: hci7: command 0x041b tx timeout [ 68.975024] Bluetooth: hci6: command 0x041b tx timeout [ 70.703018] Bluetooth: hci0: command 0x040f tx timeout [ 70.830063] Bluetooth: hci3: command 0x040f tx timeout [ 70.830871] Bluetooth: hci5: command 0x040f tx timeout [ 70.831676] Bluetooth: hci1: command 0x040f tx timeout [ 70.832472] Bluetooth: hci4: command 0x040f tx timeout [ 70.894068] Bluetooth: hci2: command 0x040f tx timeout [ 70.958023] Bluetooth: hci7: command 0x040f tx timeout [ 71.022078] Bluetooth: hci6: command 0x040f tx timeout [ 72.749985] Bluetooth: hci0: command 0x0419 tx timeout [ 72.878022] Bluetooth: hci4: command 0x0419 tx timeout [ 72.878496] Bluetooth: hci1: command 0x0419 tx timeout [ 72.878898] Bluetooth: hci5: command 0x0419 tx timeout [ 72.879672] Bluetooth: hci3: command 0x0419 tx timeout [ 72.942006] Bluetooth: hci2: command 0x0419 tx timeout [ 73.006498] Bluetooth: hci7: command 0x0419 tx timeout [ 73.071045] Bluetooth: hci6: command 0x0419 tx timeout 04:40:57 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x7fff}, @mss={0x2, 0x5}], 0x2) r6 = epoll_create1(0x0) getgroups(0x7, &(0x7f0000000900)=[0xee00, 0xee00, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6, {0x0, r7}}, './file0\x00'}) 04:40:57 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x7fff}, @mss={0x2, 0x5}], 0x2) r6 = epoll_create1(0x0) getgroups(0x7, &(0x7f0000000900)=[0xee00, 0xee00, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6, {0x0, r7}}, './file0\x00'}) 04:40:58 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x7fff}, @mss={0x2, 0x5}], 0x2) r6 = epoll_create1(0x0) getgroups(0x7, &(0x7f0000000900)=[0xee00, 0xee00, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6, {0x0, r7}}, './file0\x00'}) 04:40:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r12, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r13, 0x40046210, &(0x7f00000028c0)) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r14, 0x8008330e, &(0x7f0000002940)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) setsockopt$inet_tcp_buf(r15, 0x6, 0x1c, &(0x7f00000029c0)="a4b7459981f6b08bf78963c02a651e88900607bca97c0c9b667de9a968cddcbde50aae7c49f52b8b4061403f670b8f61ccff5c29a3338db7689cb4eb89eecd36e8ee018e282e3d766bf70de1222d44f80d440d772b5ee5eb1be7a9ceda51d9d212c6e6d7be68c0", 0x67) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:40:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r12, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r13, 0x40046210, &(0x7f00000028c0)) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r14, 0x8008330e, &(0x7f0000002940)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) setsockopt$inet_tcp_buf(r15, 0x6, 0x1c, &(0x7f00000029c0)="a4b7459981f6b08bf78963c02a651e88900607bca97c0c9b667de9a968cddcbde50aae7c49f52b8b4061403f670b8f61ccff5c29a3338db7689cb4eb89eecd36e8ee018e282e3d766bf70de1222d44f80d440d772b5ee5eb1be7a9ceda51d9d212c6e6d7be68c0", 0x67) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:40:58 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x7fff}, @mss={0x2, 0x5}], 0x2) r6 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 04:40:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r12, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r13, 0x40046210, &(0x7f00000028c0)) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r14, 0x8008330e, &(0x7f0000002940)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) setsockopt$inet_tcp_buf(r15, 0x6, 0x1c, &(0x7f00000029c0)="a4b7459981f6b08bf78963c02a651e88900607bca97c0c9b667de9a968cddcbde50aae7c49f52b8b4061403f670b8f61ccff5c29a3338db7689cb4eb89eecd36e8ee018e282e3d766bf70de1222d44f80d440d772b5ee5eb1be7a9ceda51d9d212c6e6d7be68c0", 0x67) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:40:59 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r12, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r13, 0x40046210, &(0x7f00000028c0)) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r14, 0x8008330e, &(0x7f0000002940)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) [ 121.322391] loop3: detected capacity change from 0 to 3 [ 121.330787] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 121.358036] loop3: detected capacity change from 0 to 3 [ 121.358985] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 122.331773] tmpfs: Bad value for 'gid' [ 122.342612] tmpfs: Bad value for 'gid' 04:41:20 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r11, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r12, 0x40046210, &(0x7f00000028c0)) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r13, 0x8008330e, &(0x7f0000002940)) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:41:20 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002440)) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}}, 0x0) 04:41:20 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xfca6227b7db8ce16}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:41:20 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000ac0)='ceph\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='/\x00', 0xfffffffffffffffb) syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0xbe, 0x1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="12ec7d6cf7578be26681efbda45c00de0ea7b387d31514198d6e18ad2be80850a581bc6733cff448899646f2f082d1473a92522a894bdea348a0d0ec8f0bee0f1affb21e37a23ba50c9024dc51319e0225d8f8adb0df1e0ef3ded487cfc372c18917e5cc54bce44d40a3ca223e6981362eca0ec2004b2e2a93d22a26bc54b0846f1dbd002a29be5601e64ffdc9aec14d7762f9335b76779c57db33f436c26ea2ca2ae599a2b393b37bc67806bcc0cbb369e3e27ae8f61f572f6a10c0315d6412132e5422efe013afdb90d8e7a56c000b70d7a156fb", 0xd5, 0x7}], 0x480, &(0x7f0000000d40)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x30}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/\x00'}}, {@audit}]}) r6 = request_key(&(0x7f0000000dc0)='encrypted\x00', &(0x7f0000000e00)={'syz', 0x2}, &(0x7f0000000e40)='\x00', r3) keyctl$link(0x8, r6, r4) 04:41:20 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x7fff}, @mss={0x2, 0x5}], 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:41:20 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r9}}, './file0\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r10, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) statx(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000001cc0)={0xec, 0x0, &(0x7f0000000bc0)=[@increfs_done, @dead_binder_done, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x6, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/67, 0x43, 0x6, 0x33}, @flat=@handle={0x73682a85, 0x110b, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x25}}, &(0x7f0000000b80)={0x0, 0x28, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x1000, 0x0, &(0x7f0000000cc0)="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"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0x0, r13}}, './file0\x00'}) 04:41:20 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r10, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r11 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r11}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r12, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001340)={0x50, 0x0, &(0x7f0000001240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001180)={@fda={0x66646185, 0x6, 0x2, 0x17}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r13}}, &(0x7f0000001200)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x3}, @enter_looper], 0x41, 0x0, &(0x7f00000012c0)="07949aa1e6ccd786b679ef79e8f013f3b228bea8d1ebd659224615260760dc87ff24815c84c27dbb9eea9c013525bf1543564aa660be966613227a09d0c74c2643"}) 04:41:20 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) [ 141.892726] tmpfs: Bad value for 'gid' [ 141.958729] loop3: detected capacity change from 0 to 3 [ 141.976899] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:41:20 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r10, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r11 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r11}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r12, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001340)={0x50, 0x0, &(0x7f0000001240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001180)={@fda={0x66646185, 0x6, 0x2, 0x17}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r13}}, &(0x7f0000001200)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x3}, @enter_looper], 0x41, 0x0, &(0x7f00000012c0)="07949aa1e6ccd786b679ef79e8f013f3b228bea8d1ebd659224615260760dc87ff24815c84c27dbb9eea9c013525bf1543564aa660be966613227a09d0c74c2643"}) 04:41:20 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xfca6227b7db8ce16}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:41:20 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002440)) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}}, 0x0) 04:41:20 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000ac0)='ceph\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='/\x00', 0xfffffffffffffffb) syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0xbe, 0x1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="12ec7d6cf7578be26681efbda45c00de0ea7b387d31514198d6e18ad2be80850a581bc6733cff448899646f2f082d1473a92522a894bdea348a0d0ec8f0bee0f1affb21e37a23ba50c9024dc51319e0225d8f8adb0df1e0ef3ded487cfc372c18917e5cc54bce44d40a3ca223e6981362eca0ec2004b2e2a93d22a26bc54b0846f1dbd002a29be5601e64ffdc9aec14d7762f9335b76779c57db33f436c26ea2ca2ae599a2b393b37bc67806bcc0cbb369e3e27ae8f61f572f6a10c0315d6412132e5422efe013afdb90d8e7a56c000b70d7a156fb", 0xd5, 0x7}], 0x480, &(0x7f0000000d40)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x30}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/\x00'}}, {@audit}]}) r6 = request_key(&(0x7f0000000dc0)='encrypted\x00', &(0x7f0000000e00)={'syz', 0x2}, &(0x7f0000000e40)='\x00', r3) keyctl$link(0x8, r6, r4) [ 142.224819] tmpfs: Bad value for 'gid' 04:41:31 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000ac0)='ceph\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='/\x00', 0xfffffffffffffffb) syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0xbe, 0x1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="12ec7d6cf7578be26681efbda45c00de0ea7b387d31514198d6e18ad2be80850a581bc6733cff448899646f2f082d1473a92522a894bdea348a0d0ec8f0bee0f1affb21e37a23ba50c9024dc51319e0225d8f8adb0df1e0ef3ded487cfc372c18917e5cc54bce44d40a3ca223e6981362eca0ec2004b2e2a93d22a26bc54b0846f1dbd002a29be5601e64ffdc9aec14d7762f9335b76779c57db33f436c26ea2ca2ae599a2b393b37bc67806bcc0cbb369e3e27ae8f61f572f6a10c0315d6412132e5422efe013afdb90d8e7a56c000b70d7a156fb", 0xd5, 0x7}], 0x480, &(0x7f0000000d40)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x30}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/\x00'}}, {@audit}]}) r6 = request_key(&(0x7f0000000dc0)='encrypted\x00', &(0x7f0000000e00)={'syz', 0x2}, &(0x7f0000000e40)='\x00', r3) keyctl$link(0x8, r6, r4) 04:41:31 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r11, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r12, 0x40046210, &(0x7f00000028c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002900), 0x12d000, 0x0) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:41:31 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:41:31 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r10, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r11 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r11}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r12, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001340)={0x50, 0x0, &(0x7f0000001240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001180)={@fda={0x66646185, 0x6, 0x2, 0x17}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r13}}, &(0x7f0000001200)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x3}, @enter_looper], 0x41, 0x0, &(0x7f00000012c0)="07949aa1e6ccd786b679ef79e8f013f3b228bea8d1ebd659224615260760dc87ff24815c84c27dbb9eea9c013525bf1543564aa660be966613227a09d0c74c2643"}) 04:41:31 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) 04:41:31 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r9}}, './file0\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r10, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) statx(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000001cc0)={0xec, 0x0, &(0x7f0000000bc0)=[@increfs_done, @dead_binder_done, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x6, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/67, 0x43, 0x6, 0x33}, @flat=@handle={0x73682a85, 0x110b, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x25}}, &(0x7f0000000b80)={0x0, 0x28, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x1000, 0x0, &(0x7f0000000cc0)="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"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0x0, r13}}, './file0\x00'}) 04:41:31 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002440)) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}}, 0x0) 04:41:31 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xfca6227b7db8ce16}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:41:31 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r6 = accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002440)) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 153.458155] loop3: detected capacity change from 0 to 3 [ 153.465373] tmpfs: Bad value for 'gid' [ 153.477842] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:41:32 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r11, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r12, 0x40046210, &(0x7f00000028c0)) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:41:32 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r6 = accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002440)) 04:41:44 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:41:44 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) 04:41:44 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) 04:41:44 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000ac0)='ceph\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='/\x00', 0xfffffffffffffffb) syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0xbe, 0x1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="12ec7d6cf7578be26681efbda45c00de0ea7b387d31514198d6e18ad2be80850a581bc6733cff448899646f2f082d1473a92522a894bdea348a0d0ec8f0bee0f1affb21e37a23ba50c9024dc51319e0225d8f8adb0df1e0ef3ded487cfc372c18917e5cc54bce44d40a3ca223e6981362eca0ec2004b2e2a93d22a26bc54b0846f1dbd002a29be5601e64ffdc9aec14d7762f9335b76779c57db33f436c26ea2ca2ae599a2b393b37bc67806bcc0cbb369e3e27ae8f61f572f6a10c0315d6412132e5422efe013afdb90d8e7a56c000b70d7a156fb", 0xd5, 0x7}], 0x480, &(0x7f0000000d40)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x30}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/\x00'}}, {@audit}]}) keyctl$link(0x8, 0x0, r4) 04:41:44 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:41:44 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r9}}, './file0\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r10, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) statx(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000001cc0)={0xec, 0x0, &(0x7f0000000bc0)=[@increfs_done, @dead_binder_done, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x6, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/67, 0x43, 0x6, 0x33}, @flat=@handle={0x73682a85, 0x110b, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x25}}, &(0x7f0000000b80)={0x0, 0x28, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x1000, 0x0, &(0x7f0000000cc0)="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"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0x0, r13}}, './file0\x00'}) 04:41:44 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:41:44 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r11, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs2/custom0\x00', 0x400, 0x0) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:41:44 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:41:44 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r7 = epoll_create(0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002580)={0x4}) r9 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002600)=r1, 0x12) r10 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000002680)={0x12}) recvmsg$unix(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) mount_setattr(r11, &(0x7f0000002800)='./file0\x00', 0x100, &(0x7f0000002840)={0x100086, 0x84, 0xa0000, {r5}}, 0x20) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) [ 165.744268] loop3: detected capacity change from 0 to 3 [ 165.750417] tmpfs: Bad value for 'gid' [ 165.756821] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:41:44 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002340)=[@sack_perm, @window={0x3, 0x7, 0x80}, @sack_perm], 0x3) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) 04:41:44 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:41:44 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r8}}, './file0\x00'}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) statx(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000001cc0)={0xec, 0x0, &(0x7f0000000bc0)=[@increfs_done, @dead_binder_done, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x6, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/67, 0x43, 0x6, 0x33}, @flat=@handle={0x73682a85, 0x110b, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x25}}, &(0x7f0000000b80)={0x0, 0x28, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x1000, 0x0, &(0x7f0000000cc0)="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"}) [ 165.957895] loop3: detected capacity change from 0 to 3 [ 165.964511] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:41:58 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:41:58 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r8}}, './file0\x00'}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) statx(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:41:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r6 = epoll_create(0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000002580)={0x4}) r8 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000002600)=r1, 0x12) r9 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000002680)={0x12}) recvmsg$unix(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/35, 0x23}], 0x1, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40012000) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:41:58 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:41:58 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002300)='illinois\x00', 0x9) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) 04:41:58 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000ac0)='ceph\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='/\x00', 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r4) 04:41:58 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) 04:41:58 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 179.843756] loop3: detected capacity change from 0 to 3 [ 179.846793] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:41:58 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r4) 04:41:58 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) socket$inet6_icmp(0xa, 0x2, 0x3a) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) 04:41:58 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r3, r7}}, './file0\x00'}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) statx(r4, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:41:58 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:41:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r5 = epoll_create(0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000002580)={0x4}) r7 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000002600)=r1, 0x12) r8 = openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r8, &(0x7f0000002680)={0x12}) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:41:58 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000500), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/247, 0xf7}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40) keyctl$link(0x8, 0x0, r4) 04:41:58 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r3, r7}}, './file0\x00'}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) statx(r4, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:41:58 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000022c0)={0x68, 0x0, &(0x7f00000021c0)=[@enter_looper, @dead_binder_done, @free_buffer, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002100)={@fda={0x66646185, 0xa, 0x2, 0x12}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000002180)={0x0, 0x20, 0x38}}}], 0x77, 0x0, &(0x7f0000002240)="4eb24c7673ebfa12dea698668165693aa34baef34cbd8eb0182237f36f474033142341add04e0d3be042232a5fce6d11c9900326aae2b6b8f0f13b2b85dc2d481a392a4d9c32dcac37804acbe75770fca0521f1296bdddff67021cde8507c3b6c9038e73dff35812f26dc1ebecffbc8144375c66136f78"}) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) [ 187.822304] Bluetooth: hci0: command 0x0406 tx timeout [ 187.823308] Bluetooth: hci4: command 0x0406 tx timeout [ 187.824243] Bluetooth: hci3: command 0x0406 tx timeout [ 187.825157] Bluetooth: hci2: command 0x0406 tx timeout [ 187.826065] Bluetooth: hci7: command 0x0406 tx timeout [ 187.826962] Bluetooth: hci6: command 0x0406 tx timeout [ 187.827818] Bluetooth: hci5: command 0x0406 tx timeout [ 187.828740] Bluetooth: hci1: command 0x0406 tx timeout [ 189.871176] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 189.872444] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.873405] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.874707] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 189.876318] Call Trace: [ 189.877274] [ 189.878105] __schedule+0x893/0x2470 [ 189.878770] ? io_schedule_timeout+0x150/0x150 [ 189.879455] ? do_raw_spin_lock+0x121/0x260 [ 189.880066] ? rwlock_bug.part.0+0x90/0x90 [ 189.880652] schedule+0xda/0x1b0 [ 189.881157] rescuer_thread+0x851/0xdb0 [ 189.881712] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.882446] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.883170] ? lockdep_hardirqs_on+0x79/0x100 [ 189.883816] ? worker_thread+0x1260/0x1260 [ 189.884444] kthread+0x2ed/0x3a0 [ 189.884960] ? kthread_complete_and_exit+0x40/0x40 [ 189.885652] ret_from_fork+0x22/0x30 [ 189.886252] [ 189.886581] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 189.887513] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.888253] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.889288] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 189.890438] Call Trace: [ 189.890788] [ 189.891126] __schedule+0x893/0x2470 [ 189.891647] ? io_schedule_timeout+0x150/0x150 [ 189.892285] ? do_raw_spin_lock+0x121/0x260 [ 189.892875] ? rwlock_bug.part.0+0x90/0x90 [ 189.893480] schedule+0xda/0x1b0 [ 189.893974] rescuer_thread+0x851/0xdb0 [ 189.894545] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.895258] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.895954] ? lockdep_hardirqs_on+0x79/0x100 [ 189.896582] ? worker_thread+0x1260/0x1260 [ 189.897192] kthread+0x2ed/0x3a0 [ 189.897660] ? kthread_complete_and_exit+0x40/0x40 [ 189.898360] ret_from_fork+0x22/0x30 [ 189.898902] [ 189.899257] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 189.900155] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.900894] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.901993] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 189.903183] Call Trace: [ 189.903547] [ 189.903880] __schedule+0x893/0x2470 [ 189.904456] ? io_schedule_timeout+0x150/0x150 [ 189.905139] ? do_raw_spin_lock+0x121/0x260 [ 189.905754] ? rwlock_bug.part.0+0x90/0x90 [ 189.906416] schedule+0xda/0x1b0 [ 189.906916] rescuer_thread+0x851/0xdb0 [ 189.907553] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.908290] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.909038] ? lockdep_hardirqs_on+0x79/0x100 [ 189.909689] ? worker_thread+0x1260/0x1260 [ 189.910338] kthread+0x2ed/0x3a0 [ 189.910834] ? kthread_complete_and_exit+0x40/0x40 [ 189.911552] ret_from_fork+0x22/0x30 [ 189.912140] [ 189.912478] INFO: task netns:6 blocked for more than 143 seconds. [ 189.913340] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.914117] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.915197] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 189.916378] Call Trace: [ 189.916744] [ 189.917113] __schedule+0x893/0x2470 [ 189.917663] ? io_schedule_timeout+0x150/0x150 [ 189.918350] ? do_raw_spin_lock+0x121/0x260 [ 189.918987] ? rwlock_bug.part.0+0x90/0x90 [ 189.919610] schedule+0xda/0x1b0 [ 189.920134] rescuer_thread+0x851/0xdb0 [ 189.920709] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.921454] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.922199] ? lockdep_hardirqs_on+0x79/0x100 [ 189.922859] ? worker_thread+0x1260/0x1260 [ 189.923523] kthread+0x2ed/0x3a0 [ 189.924052] ? kthread_complete_and_exit+0x40/0x40 [ 189.924763] ret_from_fork+0x22/0x30 [ 189.925348] [ 189.925691] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 189.926642] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.927421] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.928504] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 189.929692] Workqueue: 0x0 (ata_sff) [ 189.930283] Call Trace: [ 189.930649] [ 189.931013] __schedule+0x893/0x2470 [ 189.931564] ? io_schedule_timeout+0x150/0x150 [ 189.932284] schedule+0xda/0x1b0 [ 189.932789] worker_thread+0x15f/0x1260 [ 189.933423] ? process_one_work+0x16a0/0x16a0 [ 189.934111] kthread+0x2ed/0x3a0 [ 189.934607] ? kthread_complete_and_exit+0x40/0x40 [ 189.935341] ret_from_fork+0x22/0x30 [ 189.935903] [ 189.936272] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 189.937221] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.938006] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.939126] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 189.940321] Workqueue: 0x0 (kblockd) [ 189.940887] Call Trace: [ 189.941289] [ 189.941628] __schedule+0x893/0x2470 [ 189.942228] ? io_schedule_timeout+0x150/0x150 [ 189.942903] schedule+0xda/0x1b0 [ 189.943438] worker_thread+0x15f/0x1260 [ 189.944070] ? process_one_work+0x16a0/0x16a0 [ 189.944722] kthread+0x2ed/0x3a0 [ 189.945259] ? kthread_complete_and_exit+0x40/0x40 [ 189.945996] ret_from_fork+0x22/0x30 [ 189.946572] [ 189.946909] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 189.947879] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.948650] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.949746] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 189.950953] Call Trace: [ 189.951313] [ 189.951631] __schedule+0x893/0x2470 [ 189.952210] ? io_schedule_timeout+0x150/0x150 [ 189.952827] ? do_raw_spin_lock+0x121/0x260 [ 189.953450] ? rwlock_bug.part.0+0x90/0x90 [ 189.954076] schedule+0xda/0x1b0 [ 189.954557] rescuer_thread+0x851/0xdb0 [ 189.955141] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.955819] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.956521] ? lockdep_hardirqs_on+0x79/0x100 [ 189.957182] ? worker_thread+0x1260/0x1260 [ 189.957782] kthread+0x2ed/0x3a0 [ 189.958311] ? kthread_complete_and_exit+0x40/0x40 [ 189.959036] ret_from_fork+0x22/0x30 [ 189.959583] [ 189.959920] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 189.960876] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.961608] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.962655] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 189.963791] Call Trace: [ 189.964168] [ 189.964485] __schedule+0x893/0x2470 [ 189.965039] ? io_schedule_timeout+0x150/0x150 [ 189.965671] ? mark_held_locks+0x9e/0xe0 [ 189.966281] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.967006] schedule+0xda/0x1b0 [ 189.967501] rcu_tasks_one_gp+0x3db/0xc10 [ 189.968157] rcu_tasks_kthread+0x80/0xa0 [ 189.968738] ? rcu_tasks_postscan+0x10/0x10 [ 189.969389] kthread+0x2ed/0x3a0 [ 189.969890] ? kthread_complete_and_exit+0x40/0x40 [ 189.970635] ret_from_fork+0x22/0x30 [ 189.971219] [ 189.971566] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 189.972506] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.973277] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.974390] task:kworker/1:0 state:I stack:29416 pid:20 ppid:2 flags:0x00004000 [ 189.975570] Workqueue: 0x0 (rcu_gp) [ 189.976143] Call Trace: [ 189.976515] [ 189.976847] __schedule+0x893/0x2470 [ 189.977450] ? io_schedule_timeout+0x150/0x150 [ 189.978169] schedule+0xda/0x1b0 [ 189.978676] worker_thread+0x15f/0x1260 [ 189.979311] ? process_one_work+0x16a0/0x16a0 [ 189.980002] kthread+0x2ed/0x3a0 [ 189.980497] ? kthread_complete_and_exit+0x40/0x40 [ 189.981238] ret_from_fork+0x22/0x30 [ 189.981806] [ 189.982218] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 189.983182] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.983892] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.984951] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 189.986107] Workqueue: 0x0 (events_highpri) [ 189.986720] Call Trace: [ 189.987099] [ 189.987421] __schedule+0x893/0x2470 [ 189.987983] ? io_schedule_timeout+0x150/0x150 [ 189.988627] schedule+0xda/0x1b0 [ 189.989134] worker_thread+0x15f/0x1260 [ 189.989711] ? process_one_work+0x16a0/0x16a0 [ 189.990367] kthread+0x2ed/0x3a0 [ 189.990839] ? kthread_complete_and_exit+0x40/0x40 [ 189.991548] ret_from_fork+0x22/0x30 [ 189.992148] [ 189.992543] [ 189.992543] Showing all locks held in the system: [ 189.993429] 1 lock held by rcu_tasks_kthre/11: [ 189.994108] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 189.995509] 1 lock held by khungtaskd/25: [ 189.996125] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 189.997441] 1 lock held by systemd-journal/112: [ 189.998151] 1 lock held by in:imklog/189: [ 189.998734] #0: ffff88800892a0e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 189.999968] 2 locks held by syz-executor/4218: [ 190.000627] [ 190.000872] ============================================= [ 190.000872] 04:42:12 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) 04:42:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:42:12 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:42:12 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:42:12 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) 04:42:12 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x3}, r5) keyctl$link(0x8, 0x0, r4) 04:42:12 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r3, r7}}, './file0\x00'}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) statx(r4, &(0x7f00000005c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000600)) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:42:12 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r5 = epoll_create(0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000002580)={0x4}) r7 = openat$cgroup_procs(r4, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000002600)=r1, 0x12) openat$cgroup_type(r3, &(0x7f0000002640), 0x2, 0x0) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:42:12 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r8}}, './file0\x00'}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:42:12 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r2, 0xa, 0x0, &(0x7f0000002540)) r4 = epoll_create(0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000002580)={0x4}) r6 = openat$cgroup_procs(r3, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000002600)=r1, 0x12) prlimit64(r2, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:42:12 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000020c0)={0xedd4}, 0x4) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) [ 194.421694] loop3: detected capacity change from 0 to 3 [ 194.429442] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:42:13 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, r4) 04:42:13 executing program 6: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe412}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getuid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x32940, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000002c0)={0x8000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0xa086644955328cdd, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x400c001) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0xa769, 0x200000) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000640), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000680)={0x34fd28b1f7f3dbae}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5}, 0x78) 04:42:13 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r9 = signalfd(r5, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r9}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000fc0)={0x6, 0x5000000, 0x2, 0x7f, 0xffffffe1}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:42:13 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r7}}, './file0\x00'}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:42:13 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x102) getpgrp(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000001300), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2161) prlimit64(r1, 0xa, 0x0, &(0x7f0000002540)) r3 = epoll_create(0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000002580)={0x4}) openat$cgroup_procs(r2, &(0x7f00000025c0)='cgroup.threads\x00', 0x2, 0x0) prlimit64(r1, 0x0, &(0x7f0000002a40)={0x6, 0x4}, &(0x7f0000002a80)) 04:42:13 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x40080) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) membarrier(0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r1 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='@}$[-\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/\x00', r1) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='(\x00', r1) keyctl$link(0x8, 0x0, r4) [ 194.624727] loop3: detected capacity change from 0 to 3 [ 194.632517] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 04:42:13 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000011c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a52d8fbff8f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/175, 0xaf}, {&(0x7f0000001780)=""/71, 0x47}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/91, 0x5b}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/19, 0x13}], 0x1, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/196, 0xc4}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x10000, &(0x7f0000002080)) accept(r1, &(0x7f0000002380)=@in={0x2, 0x0, @empty}, &(0x7f0000002400)=0x80) 04:42:13 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004014) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x40) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:42:13 executing program 5: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x27, 0x0, @thr={&(0x7f0000000000)="176a921f45377658ad8ecf5fd981bb94515a635eb618dfca7da49a26982e717e801159f763ce401b2ace40788345ef4a34d2c2836da3d663bddece8995540890146d9429d842f7f3f3f1e35b04ac1cd11f328df24f376f622b8bbe4eadccca6e91e7ef", &(0x7f0000000080)="42e50b5fd2ffc9537afeeb3167411daa08ab9262fbe8bf0e0509db19f64e6a9048f3ec5264278be7d59acfbcb3d372d93c333800c98e1e7ccb8e62b921328133b39a1a72ae422f969a62118d453d1c81092f10eb5a3f7e204ae07666085faf3a437997748823d8fd3bf4627f456c55cbfc3bb7a452a57d09ed037fd8bd1172bda7f2afd85703a8852e24facc28bf12ae4a8367d37679e1becf902cb0279d35f44eeb1f1214198e7ba6b44c1264f0a81f010f655b27"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x0, 0x200, &(0x7f0000000440)) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) timer_delete(r0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x80000000, 0x1b5d00) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40890) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008050) 04:42:13 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="b296902390c3dccc1e7df7ef4b36b8ea6fb49b89e638ef320dd63e7d17b8c1a711", 0x21) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x20240) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x6100, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r7}}, './file0\x00'}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000500)={0x0, 0x20e}) setfsuid(r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x657, 0x4, &(0x7f0000000880)=[{&(0x7f0000000780)="b29cac55171e46a6ba31d156d45cc368829ec344987a8cba2390eb3303c97e480a9bb85327ce6b578a75", 0x2a, 0x5}, {&(0x7f00000007c0)="59158f45e69e34eac250b9899106f39352f3e334a384bf11dba7bd06", 0x1c, 0x9}, {&(0x7f0000000800)='~', 0x1, 0x64}, {&(0x7f0000000840)="ad8d60e56c33ed2343f07b", 0xb, 0x9}], 0x800, &(0x7f0000000900)={[{@rodir}, {@numtail}, {@nonumtail}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) syz_open_dev$vcsn(&(0x7f0000000980), 0x6, 0x58500) 04:42:13 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x18d803) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x5}) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000500)={0x8}) r1 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x210000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000a00)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x2000) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000d40)={0x3, 0x6}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000dc0)={0x739e, 0x9b}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000e00)={0x0, 0xfffffffd, 0x9, 0x8, 0x3f}, 0x14) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x101700, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, &(0x7f0000000e80)={{0x6, 0x7fffffff}, {0x1}, 0x4e}) syz_open_procfs$userns(r2, &(0x7f0000000ec0)) r8 = signalfd(r4, &(0x7f0000000f40)={[0x9]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x9100, &(0x7f0000000f80)={0x4, 0x84, 0xaa403fa3692e40b1, {r8}}, 0x20) syz_io_uring_setup(0x5551, &(0x7f0000001000)={0x0, 0xf746, 0x1, 0x0, 0x264, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000001100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0) VM DIAGNOSIS: 04:42:08 Registers: info registers vcpu 0 RAX=1ffff11002fd4745 RBX=ffff888017ea3580 RCX=ffffffff817bd057 RDX=1ffff11002fd46b0 RSI=0000000000000008 RDI=ffff888017ea3580 RBP=dffffc0000000000 RSP=ffff8880161efa88 R8 =0000000000000000 R9 =ffff888017ea3587 R10=ffffed1002fd46b0 R11=0000000000000001 R12=ffff88806f75fff9 R13=ffff888017ea3580 R14=0000000000000000 R15=0000000000000086 RIP=ffffffff81787e94 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555558ee400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f32f992e8a0 CR3=000000003667e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 e8cd466192455d82 934e755ff4a86119 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec68 YMM04=0000000000000000 0000000000000000 1994c6ba4c5ce2a1 0000000000137d20 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 0f18770910674899 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f840 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562adf1a8700 CR3=00000000174f6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 414a35bdc19a7758 YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f74367321400374 YMM04=0000000000000000 0000000000000000 6c6f502e72656761 6e614d0c0182ff13 YMM05=0000000000000000 0000000000000000 20726f7475636578 6511007a7a756620 YMM06=0000000000000000 0000000000000000 6720636578650800 7374726174736572 YMM07=0000000000000000 0000000000000000 0065676169727420 636578650b006e65 YMM08=0000000000000000 0000000000000000 0a10657a696d696e 696d20636578650d YMM09=0000000000000000 0000000000000000 636578650a006873 616d732063657865 YMM10=0000000000000000 0000000000000000 6565732063657865 0a0073746e696820 YMM11=0000000000000000 0000000000000000 0e106c61746f7420 636578650a007364 YMM12=0000000000000000 0000000000000000 0000657461646964 6e61632063657865 YMM13=0000000000000000 0000000000000000 76d367834aae12bf 28ccfa242e85a803 YMM14=0000000000000000 0000000000000000 14121feb4ef4359d 27b02c90cfbee179 YMM15=0000000000000000 0000000000000000 275b650f011fa8f0 64124cb4a67b8e19