Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:53753' (ECDSA) to the list of known hosts. 2026/01/19 13:26:35 fuzzer started 2026/01/19 13:26:35 dialing manager at localhost:42157 syzkaller login: [ 51.930896] cgroup: Unknown subsys name 'net' [ 51.997638] cgroup: Unknown subsys name 'cpuset' [ 52.013130] cgroup: Unknown subsys name 'rlimit' 2026/01/19 13:26:46 syscalls: 212 2026/01/19 13:26:46 code coverage: enabled 2026/01/19 13:26:46 comparison tracing: enabled 2026/01/19 13:26:46 extra coverage: enabled 2026/01/19 13:26:46 setuid sandbox: enabled 2026/01/19 13:26:46 namespace sandbox: enabled 2026/01/19 13:26:46 Android sandbox: enabled 2026/01/19 13:26:46 fault injection: enabled 2026/01/19 13:26:46 leak checking: enabled 2026/01/19 13:26:46 net packet injection: enabled 2026/01/19 13:26:46 net device setup: enabled 2026/01/19 13:26:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/19 13:26:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/19 13:26:46 USB emulation: enabled 2026/01/19 13:26:46 hci packet injection: enabled 2026/01/19 13:26:46 wifi device emulation: enabled 2026/01/19 13:26:46 802.15.4 emulation: enabled 2026/01/19 13:26:46 fetching corpus: 0, signal 0/0 (executing program) 2026/01/19 13:26:47 starting 8 fuzzer processes 13:26:47 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r4}, 0x68) accept(r1, 0x0, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000600)={0x2, 0x1, 0x69, 0x3, 0x4861}) 13:26:47 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) r4 = accept4(r0, &(0x7f0000000740)=@ieee802154={0x24, @long}, &(0x7f00000007c0)=0x80, 0x800) getsockname(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000008c0)) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd82a9aab3db4b59}, 0x40) 13:26:47 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:26:47 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x300) shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000900)) 13:26:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4fe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 13:26:47 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x4, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xc10000, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000000480)=0x9ee) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) [ 62.361251] audit: type=1400 audit(1768829207.388:7): avc: denied { execmem } for pid=271 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:26:47 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:26:47 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/216, 0xd8}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x1, 0x24, 0xffffffffffffffff, &(0x7f0000000740)}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000800)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 63.543070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.545509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.548165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.549446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.551157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.554066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.555768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.558420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.560666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.569415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.604655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.608033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.608788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.611060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.612325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.614566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.616745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.618234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.622829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.624490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.625983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.628800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.631557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.641664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.662458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.662781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.670439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.676094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.694531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.696833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.700193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.703543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.707573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.718131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.722398] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.725828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.727759] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.734537] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.792557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.808588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.630798] Bluetooth: hci0: command tx timeout [ 65.630917] Bluetooth: hci1: command tx timeout [ 65.694769] Bluetooth: hci4: command tx timeout [ 65.695327] Bluetooth: hci3: command tx timeout [ 65.758565] Bluetooth: hci5: command tx timeout [ 65.758602] Bluetooth: hci2: command tx timeout [ 65.824221] Bluetooth: hci7: command tx timeout [ 66.015726] Bluetooth: hci6: command tx timeout [ 67.679326] Bluetooth: hci0: command tx timeout [ 67.679358] Bluetooth: hci1: command tx timeout [ 67.743039] Bluetooth: hci4: command tx timeout [ 67.743598] Bluetooth: hci3: command tx timeout [ 67.806339] Bluetooth: hci2: command tx timeout [ 67.807339] Bluetooth: hci5: command tx timeout [ 67.870533] Bluetooth: hci7: command tx timeout [ 68.063126] Bluetooth: hci6: command tx timeout [ 69.726509] Bluetooth: hci0: command tx timeout [ 69.729357] Bluetooth: hci1: command tx timeout [ 69.790357] Bluetooth: hci3: command tx timeout [ 69.791751] Bluetooth: hci4: command tx timeout [ 69.855411] Bluetooth: hci5: command tx timeout [ 69.855438] Bluetooth: hci2: command tx timeout [ 69.918400] Bluetooth: hci7: command tx timeout [ 70.111332] Bluetooth: hci6: command tx timeout [ 71.775339] Bluetooth: hci1: command tx timeout [ 71.775788] Bluetooth: hci0: command tx timeout [ 71.838338] Bluetooth: hci4: command tx timeout [ 71.838427] Bluetooth: hci3: command tx timeout [ 71.902901] Bluetooth: hci2: command tx timeout [ 71.903347] Bluetooth: hci5: command tx timeout [ 71.966910] Bluetooth: hci7: command tx timeout [ 72.159790] Bluetooth: hci6: command tx timeout [ 96.882943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.883630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.086206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.086859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.423963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.424628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.592660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.593856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:27:22 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x300) shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000900)) 13:27:22 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x300) shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000900)) 13:27:23 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/216, 0xd8}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x1, 0x24, 0xffffffffffffffff, &(0x7f0000000740)}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000800)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 13:27:23 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x300) shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000900)) 13:27:23 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x300) shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) [ 98.245313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.245893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:27:23 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x300) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) [ 98.313012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.313622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:27:23 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket(0x18, 0x80000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0, 0x1, &(0x7f0000000700)=""/205, 0xcd}, &(0x7f0000000840)=0x40) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) [ 98.419270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.419879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.495404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.496016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:27:23 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) socket(0x18, 0x80000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) [ 98.556422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.557015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.653646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.657743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.669812] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.704634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.705220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.762817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.763437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.787780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.788377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.833322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.833909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.859304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.859901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.906292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.906900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:27:38 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/216, 0xd8}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x1, 0x24, 0xffffffffffffffff, &(0x7f0000000740)}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000800)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 13:27:38 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:27:38 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:27:38 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x4, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xc10000, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000000480)=0x9ee) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:27:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4fe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 13:27:38 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) r4 = accept4(r0, &(0x7f0000000740)=@ieee802154={0x24, @long}, &(0x7f00000007c0)=0x80, 0x800) getsockname(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000008c0)) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd82a9aab3db4b59}, 0x40) 13:27:38 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:27:38 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r4}, 0x68) accept(r1, 0x0, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000600)={0x2, 0x1, 0x69, 0x3, 0x4861}) 13:27:46 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x4, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xc10000, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000000480)=0x9ee) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:27:46 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/216, 0xd8}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x1, 0x24, 0xffffffffffffffff, &(0x7f0000000740)}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000800)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 13:27:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4fe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 13:27:46 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r4}, 0x68) accept(r1, 0x0, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000600)={0x2, 0x1, 0x69, 0x3, 0x4861}) 13:27:46 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x290804) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:27:46 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:27:46 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) r4 = accept4(r0, &(0x7f0000000740)=@ieee802154={0x24, @long}, &(0x7f00000007c0)=0x80, 0x800) getsockname(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000008c0)) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd82a9aab3db4b59}, 0x40) 13:27:46 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:27:47 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) r4 = accept4(r0, &(0x7f0000000740)=@ieee802154={0x24, @long}, &(0x7f00000007c0)=0x80, 0x800) getsockname(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000008c0)) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd82a9aab3db4b59}, 0x40) 13:27:47 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4044040) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:27:47 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r4}, 0x68) accept(r1, 0x0, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000600)={0x2, 0x1, 0x69, 0x3, 0x4861}) 13:27:47 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x4, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xc10000, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000000480)=0x9ee) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:27:54 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) r4 = accept4(r0, &(0x7f0000000740)=@ieee802154={0x24, @long}, &(0x7f00000007c0)=0x80, 0x800) getsockname(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000008c0)) 13:27:54 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:27:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4fe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 13:27:54 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/216, 0xd8}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x1, 0x24, 0xffffffffffffffff, &(0x7f0000000740)}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000800)) 13:27:54 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r4}, 0x68) accept(r1, 0x0, &(0x7f0000000580)) 13:27:54 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x4, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xc10000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:27:54 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:27:54 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:27:54 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) r2 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty, @remote}, &(0x7f00000004c0)=0xc) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:27:54 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r4}, 0x68) 13:27:54 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:27:54 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) 13:27:54 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x4, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:27:54 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) r4 = accept4(r0, &(0x7f0000000740)=@ieee802154={0x24, @long}, &(0x7f00000007c0)=0x80, 0x800) getsockname(r4, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:27:54 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80}, 0x68) 13:27:54 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80800) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:27:55 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/216, 0xd8}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x1, 0x24, 0xffffffffffffffff, &(0x7f0000000740)}) 13:27:55 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) 13:27:55 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:27:55 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x200, 0x400}, 0x240000) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:27:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4fe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x800) 13:27:55 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80}, 0x68) 13:27:55 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:03 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:03 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80}, 0x68) 13:28:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) 13:28:03 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) socket$inet_udp(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:03 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000004c0)) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:03 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000780)={0x9d, 0x9, 0xeca5, "3e01ea252e84b6586c053be1a70eb1007e78cbc7316027636440b2f6c79a9ae5f7f518bc9e601df7c4ffa82ad293fa3c799b3e7b531b4c661e177d53621d6a8527c7743eccb1b3ca3b4a37789e8d5f294e95da65d959d32d8842f1d395c05c876e1138373f44bc8ef340a9f3b75b76054800357186c6e31008858f2c148438fa4a3a847e73cc8475757adcecdcb6ca814c090a2b690caa06c9a026fe35"}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) 13:28:03 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:03 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:03 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x101000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:03 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:03 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:03 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) syz_open_dev$sg(&(0x7f0000000480), 0x1a, 0x40000) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:03 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000380)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:03 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000002c0)={{0x3, 0x3, 0xffff, 0x1, 0x1}, 0x9, 0x800, 0x287}) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:03 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000002c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:03 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:12 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:12 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:12 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000280)=0xa9) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:12 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:12 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0xec, 0x7f, @buffer={0x0, 0xcd, &(0x7f0000000500)=""/205}, &(0x7f0000000600)="0011d61ec9c28967726130e0afcf22702d71906dc59f7c0da38f9e3d84dc019ce8ad03ac312fea7f826d853543351f3a0fe7bb6f139c9e70e6360c4876feda4748cf8923b3e0bbbd0155ea1d173a869b08472283ddc0bfb63e0e229e3e4d9ed06c755ff6241a059c73ce6dee2463bb6b9e2a47ac9ec58f83d0c3e86b67b2e5cb08221da328760dd01b3028c79edacfbcb0250d4871635c3c2b86e332b799920a42f7cecb714ad0ca587c3826e073947232f780b2a448b1d3cad23d3f054c25a915bd09bb21b49dc17680281f5b88fc5e14edd1ffcbd8731df75a1782c0006f8987acc956bab1798148e588f0", &(0x7f0000000700)=""/143, 0x4, 0x10004, 0x1, &(0x7f00000007c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:12 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x80) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:12 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000340)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:12 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0xae, 0x9, 0x5, "e4141e0d2ecdbe58f06cf41a78bf9cab5f2f969fdb00310acfa6cb683bc8bc2fe10a4b181195425fcb4b59a881936174b97bf0146e30136b195b030127ce04f8b29278b0c786f0649a940559de18f57fef01578735a8fb4587c40d35bb34c878c87a5592883f754ec9f42254b47e3bcac3c79a8fe712e2c2b71ed01a4db983bfb67df03d1e2b5f460f8aa8f13f26e306ea5175c10aff33fdeaf81b17c6edc55e1924c9f915bded3f8a963240b141"}) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:12 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}}, 0x88) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:12 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x60880) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:20 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:20 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:20 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000240)=0x15) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:20 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:20 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000740)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:20 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:20 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:20 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:20 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:20 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000380)) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:20 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:20 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:20 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:20 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:21 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:29 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @rose, @rose, @rose]}, &(0x7f0000000500)=0x80, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:29 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:29 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:29 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:29 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000200)=0x8) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:29 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:29 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:29 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:29 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:29 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000440)={r5, 0x1, r1, 0x1, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:29 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x90100, 0x0) 13:28:29 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x8000000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:29 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0x7) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:29 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:29 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x10000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:29 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:37 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x90100, 0x0) 13:28:37 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:37 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x3, 0xffffffffffffffff, 0xffffffff, 0x80000}) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xb00, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:37 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:37 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xffffff00) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:37 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:37 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:37 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:37 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:37 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x18d001, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:37 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x90100, 0x0) 13:28:37 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:37 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:37 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:37 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:37 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:45 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x8010, r1, 0x8000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:45 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={0x74, 0x100040}, 0x20) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:45 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:45 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x228002, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:45 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x90100, 0x0) 13:28:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:45 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:45 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:45 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:45 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:45 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) r3 = accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2b, @multicast1, 0x4e23, 0x4, 'wlc\x00', 0x14, 0x0, 0x2b}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:45 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x10000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:45 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) [ 187.810043] Bluetooth: hci2: command 0x0406 tx timeout [ 187.811823] Bluetooth: hci1: command 0x0406 tx timeout [ 187.812831] Bluetooth: hci0: command 0x0406 tx timeout [ 187.813786] Bluetooth: hci6: command 0x0406 tx timeout [ 187.814791] Bluetooth: hci4: command 0x0406 tx timeout [ 187.815864] Bluetooth: hci5: command 0x0406 tx timeout [ 187.817185] Bluetooth: hci3: command 0x0406 tx timeout [ 187.818179] Bluetooth: hci7: command 0x0406 tx timeout 13:28:53 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:53 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:53 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:53 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r1, 0x8000000) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:53 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:53 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 13:28:53 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:53 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 13:28:53 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:28:53 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:53 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/118) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:28:53 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:28:53 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x20000c06) 13:28:53 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:28:53 executing program 7: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:28:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:28:53 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:29:01 executing program 7: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 13:29:01 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) r2 = inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) accept$inet(r2, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:29:01 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:29:01 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000c06) 13:29:01 executing program 2: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:01 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x6f117ef5) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:29:01 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:29:01 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r3}, 0x68) 13:29:01 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:01 executing program 2: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:01 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [ 196.658086] [ 196.658291] ===================================== [ 196.658719] WARNING: bad unlock balance detected! [ 196.659150] 6.19.0-rc5-next-20260116 #1 Not tainted [ 196.659605] ------------------------------------- [ 196.660055] syz-executor.1/4412 is trying to release lock (rcu_read_lock) at: [ 196.660729] [] __wait_on_freeing_inode+0x105/0x350 [ 196.661723] but there are no more locks to release! [ 196.662455] [ 196.662455] other info that might help us debug this: [ 196.663426] 4 locks held by syz-executor.1/4412: [ 196.664134] #0: ffff888009ee43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 196.665356] #1: ffff8880252a96f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 196.666745] #2: ffff88800fb80950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 196.667968] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 196.669405] [ 196.669405] stack backtrace: [ 196.670269] CPU: 0 UID: 0 PID: 4412 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 196.670284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 196.670292] Call Trace: [ 196.670297] [ 196.670301] dump_stack_lvl+0xca/0x120 [ 196.670331] ? __wait_on_freeing_inode+0x105/0x350 [ 196.670346] print_unlock_imbalance_bug+0x118/0x130 [ 196.670361] ? __wait_on_freeing_inode+0x105/0x350 [ 196.670376] lock_release+0x1ee/0x270 [ 196.670391] __wait_on_freeing_inode+0x10a/0x350 [ 196.670405] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 196.670421] ? __pfx_var_wake_function+0x10/0x10 [ 196.670438] ? lock_is_held_type+0x9e/0x120 [ 196.670451] insert_inode_locked+0x25f/0x890 [ 196.670467] __ext4_new_inode+0x223d/0x4cd0 [ 196.670485] ? __pfx___ext4_new_inode+0x10/0x10 [ 196.670499] ? __pfx___dquot_initialize+0x10/0x10 [ 196.670517] ? __pfx_avc_has_perm+0x10/0x10 [ 196.670533] ext4_symlink+0x623/0xb40 [ 196.670552] ? __pfx_ext4_symlink+0x10/0x10 [ 196.670568] ? security_inode_permission+0x72/0xe0 [ 196.670581] vfs_symlink+0x44b/0x840 [ 196.670597] filename_symlinkat+0x158/0x440 [ 196.670612] ? __pfx_filename_symlinkat+0x10/0x10 [ 196.670625] ? strncpy_from_user+0x21b/0x2f0 [ 196.670642] __x64_sys_symlink+0x82/0x110 [ 196.670656] do_syscall_64+0xbf/0x420 [ 196.670669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.670682] RIP: 0033:0x7f9d872b7427 [ 196.670691] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.670701] RSP: 002b:00007ffff69740f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 196.670713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9d872b7427 [ 196.670721] RDX: 00007ffff69741d3 RSI: 00007f9d8731202f RDI: 00007ffff69741c0 [ 196.670728] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffff6973f90 [ 196.670735] R10: 00007ffff6973e47 R11: 0000000000000202 R12: 0000000000000001 [ 196.670742] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffff69741c0 [ 196.670753] [ 196.689002] ------------[ cut here ]------------ [ 196.706000] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.1/4412 [ 196.723177] Modules linked in: [ 196.723586] CPU: 0 UID: 0 PID: 4412 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 196.738671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 196.762397] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 196.762868] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 196.782404] RSP: 0018:ffff88804ab9f9a0 EFLAGS: 00010286 [ 196.782834] RAX: 00000000ffffffff RBX: ffff88801ad10000 RCX: ffffffff815660f7 [ 196.798540] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801ad103fc [ 196.799115] RBP: ffff88801ad10000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 196.823377] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ad10000 [ 196.823957] R13: 0000000000000001 R14: ffffffff85c0d510 R15: ffff8880253cd8e0 [ 196.847529] FS: 000055557bf5b400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 196.848181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.868731] CR2: 000055557bf5b708 CR3: 000000004b359000 CR4: 0000000000350ef0 [ 196.892329] Call Trace: [ 196.892582] [ 196.893227] __wait_on_freeing_inode+0x10f/0x350 [ 196.936938] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 197.009636] ? __pfx_var_wake_function+0x10/0x10 [ 197.034205] ? lock_is_held_type+0x9e/0x120 [ 197.094086] insert_inode_locked+0x25f/0x890 [ 197.163703] __ext4_new_inode+0x223d/0x4cd0 [ 197.263641] ? __pfx___ext4_new_inode+0x10/0x10 [ 197.284224] ? __pfx___dquot_initialize+0x10/0x10 [ 197.316045] ? __pfx_avc_has_perm+0x10/0x10 [ 197.336308] ext4_symlink+0x623/0xb40 [ 197.338541] ? __pfx_ext4_symlink+0x10/0x10 [ 197.339557] ? security_inode_permission+0x72/0xe0 [ 197.341152] vfs_symlink+0x44b/0x840 [ 197.342472] filename_symlinkat+0x158/0x440 [ 197.343599] ? __pfx_filename_symlinkat+0x10/0x10 [ 197.344373] ? strncpy_from_user+0x21b/0x2f0 [ 197.346217] __x64_sys_symlink+0x82/0x110 [ 197.346974] do_syscall_64+0xbf/0x420 [ 197.347824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.348378] RIP: 0033:0x7f9d872b7427 [ 197.348740] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.350218] RSP: 002b:00007ffff69740f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 197.350882] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9d872b7427 [ 197.351498] RDX: 00007ffff69741d3 RSI: 00007f9d8731202f RDI: 00007ffff69741c0 [ 197.352066] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffff6973f90 [ 197.352684] R10: 00007ffff6973e47 R11: 0000000000000202 R12: 0000000000000001 [ 197.353250] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffff69741c0 [ 197.355858] [ 197.356057] irq event stamp: 407 [ 197.356374] hardirqs last enabled at (407): [] irqentry_exit+0x17b/0x650 [ 197.357100] hardirqs last disabled at (406): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 197.357958] softirqs last enabled at (400): [] kernel_fpu_end+0x59/0x70 [ 197.358731] softirqs last disabled at (398): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 197.359556] ---[ end trace 0000000000000000 ]--- 13:29:02 executing program 6: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:29:02 executing program 7: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000001) 13:29:02 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r2}, 0x68) 13:29:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:29:10 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:10 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:29:10 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7fffffff, 0x3, 0x4) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r2}, 0x68) 13:29:10 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 13:29:10 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000880)=0x80) 13:29:10 executing program 7: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) 13:29:10 executing program 2: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:10 executing program 6: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000880)) 13:29:10 executing program 5: syz_io_uring_setup(0x56b7, &(0x7f0000000000)={0x0, 0x5216, 0x8, 0x1, 0x54}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x111000, 0xf5e61166cc41fd6f, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x2}) inotify_init() sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ffeff20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xc4}}, 0x800) io_uring_setup(0x293c, &(0x7f0000000400)={0x0, 0x8d2b, 0x20, 0x1, 0x16}) setns(0xffffffffffffffff, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @remote}, 0x250, 0x0, 0x0, 0x0, 0xff, &(0x7f00000004c0)='veth1_vlan\x00', 0x8001, 0x8, 0x9}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4044) 13:29:10 executing program 1: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x2, 0xfd, 0x80, 0x4}]}) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:10 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 13:29:11 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3aef2c1c3fee0206) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x1d8a, &(0x7f0000000280)={0x0, 0x3868, 0x1, 0x2, 0x237}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd9000/0x3000)=nil, &(0x7f0000d93000/0x2000)=nil, &(0x7f0000f0c000/0x1000)=nil, &(0x7f0000f53000/0x4000)=nil, &(0x7f0000000480)="504d95bcad4a55b663d07aef6043c409ed7e1dae6f276b395c95e3d20a152a8debb06aff5afdba7562ef38e75f03de80e997384f2fc0efde05c66e1af81f442f65f06cd22ffda83a3a901e845ff8510ed67836de61da6aa22fb9b0c51e5a3f7d4ebb4ebf31d93fdb70115bbf71e62e14fb80512b0e972c78632f5d6b63e04474", 0x80, r2}, 0x68) 13:29:11 executing program 2: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=',^-.$:-\x00', 0x800, 0x22, &(0x7f0000000080)={0x9, 0x401, 0x200, 0x8}) mq_getsetattr(r0, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0xff}, &(0x7f0000000100)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000240)='![*&-\x00', 0x1, 0x11, &(0x7f0000000280)={0x7f, 0x0, 0x3132, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x460000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x1f, 0xf9, 0x2}, {0x1f, 0x1, 0x7, 0x8e51}, {0x3, 0xf7, 0x3f, 0x2}]}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) io_uring_setup(0x5c0a, &(0x7f0000000a80)={0x0, 0xdeac, 0xa, 0x1, 0x2b8}) 13:29:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13:29:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x78c}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) VM DIAGNOSIS: 13:29:01 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804ab9f488 R8 =0000000000000000 R9 =ffffed100176e046 R10=0000000000000000 R11=666666203a332320 R12=0000000000000005 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557bf5b400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557bf5b708 CR3=000000004b359000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801eccfb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003d99f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801eccfb78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555567ff6400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555567fffc58 CR3=0000000013e40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000413f2de523960106 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f71d9acb89844dd XMM04=0e51f85f841e903a3aa8fd2fd26cf065 XMM05=7d3f5a1ec5b0b92fa26ada61de3678d6 XMM06=142ee671bf5b1170db3fd931bf4ebb4e XMM07=7444e0636b5d2f63782c970e2b5180fb XMM08=31313037626466333964313366626534 XMM09=30386266343165323665313766626235 XMM10=66323336383763323739653062323135 XMM11=30202c22343734343065333662366435 XMM12=0a2938367830202c7d3372202c303878 XMM13=34316532366531376662623531313037 XMM14=38376332373965306232313530386266 XMM15=34373434306533366236643566323336