Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:25632' (ECDSA) to the list of known hosts. 2022/10/02 12:39:04 fuzzer started 2022/10/02 12:39:04 dialing manager at localhost:35095 syzkaller login: [ 36.295150] cgroup: Unknown subsys name 'net' [ 36.399846] cgroup: Unknown subsys name 'rlimit' 2022/10/02 12:39:19 syscalls: 203 2022/10/02 12:39:19 code coverage: enabled 2022/10/02 12:39:19 comparison tracing: enabled 2022/10/02 12:39:19 extra coverage: enabled 2022/10/02 12:39:19 setuid sandbox: enabled 2022/10/02 12:39:19 namespace sandbox: enabled 2022/10/02 12:39:19 Android sandbox: enabled 2022/10/02 12:39:19 fault injection: enabled 2022/10/02 12:39:19 leak checking: enabled 2022/10/02 12:39:19 net packet injection: enabled 2022/10/02 12:39:19 net device setup: enabled 2022/10/02 12:39:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 12:39:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 12:39:19 USB emulation: enabled 2022/10/02 12:39:19 hci packet injection: enabled 2022/10/02 12:39:19 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 12:39:19 802.15.4 emulation: enabled 2022/10/02 12:39:19 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 12:39:20 starting 8 fuzzer processes 12:39:20 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) 12:39:20 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) r4 = socket(0x27, 0x2, 0x1a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x60e, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) accept4(r3, &(0x7f0000000540)=@tipc=@name, &(0x7f00000005c0)=0x80, 0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:39:20 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r5, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000940)=0x7ff) r7 = accept4(r5, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) connect$802154_dgram(r7, &(0x7f0000000a40)={0x24, @long}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6gre0\x00', r4, 0x0, 0x1, 0x6, 0x3ff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x700, 0x81, 0x3}}) accept$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001080)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1a8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x3, 0x9, 0x4000}]}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 12:39:20 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000006c0)) 12:39:20 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000740)=0xc16, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)) 12:39:20 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000001580)=0x6, 0x4) [ 51.808812] audit: type=1400 audit(1664714360.952:6): avc: denied { execmem } for pid=284 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:39:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:39:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) socketpair(0x1e, 0x5, 0x81, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000007c0)={0x3, 0xad8f, "1e7ede", 0x1, 0xcc}) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000900)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, @hci={0x1f, 0xffffffffffffffff}, @rc={0x1f, @none, 0xff}, 0xfff8, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)='syzkaller0\x00', 0x6, 0xffffffff, 0x3}) [ 53.105873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.107434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.111114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.112560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.113641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.116051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.117637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.120683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.122606] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.124002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.129380] Bluetooth: hci3: HCI_REQ-0x0c1a [ 53.134830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.135872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.137534] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.161074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.173019] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.174816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.177003] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.178712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.180391] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.181811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.188732] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.189140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.192696] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.197414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.209660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.218515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.224193] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.236693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.241485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.245469] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.247371] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.250240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.253671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 53.254800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.258605] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.262672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.263964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 53.269878] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 53.271468] Bluetooth: hci4: HCI_REQ-0x0c1a [ 53.273920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 53.286372] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.185586] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 55.186617] Bluetooth: hci3: command 0x0409 tx timeout [ 55.187434] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 55.249454] Bluetooth: hci2: command 0x0409 tx timeout [ 55.250073] Bluetooth: hci0: command 0x0409 tx timeout [ 55.250599] Bluetooth: hci1: command 0x0409 tx timeout [ 55.313298] Bluetooth: hci7: command 0x0409 tx timeout [ 55.314235] Bluetooth: hci4: command 0x0409 tx timeout [ 57.233288] Bluetooth: hci3: command 0x041b tx timeout [ 57.297349] Bluetooth: hci1: command 0x041b tx timeout [ 57.298202] Bluetooth: hci0: command 0x041b tx timeout [ 57.299115] Bluetooth: hci2: command 0x041b tx timeout [ 57.361338] Bluetooth: hci4: command 0x041b tx timeout [ 57.362136] Bluetooth: hci7: command 0x041b tx timeout [ 58.035504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.044802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.046335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.057964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.070329] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.081069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.104239] Bluetooth: hci6: HCI_REQ-0x0c1a [ 59.281311] Bluetooth: hci3: command 0x040f tx timeout [ 59.345794] Bluetooth: hci2: command 0x040f tx timeout [ 59.346753] Bluetooth: hci0: command 0x040f tx timeout [ 59.347592] Bluetooth: hci1: command 0x040f tx timeout [ 59.409298] Bluetooth: hci7: command 0x040f tx timeout [ 59.410137] Bluetooth: hci4: command 0x040f tx timeout [ 59.985310] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 60.113299] Bluetooth: hci6: command 0x0409 tx timeout [ 61.329261] Bluetooth: hci3: command 0x0419 tx timeout [ 61.393453] Bluetooth: hci1: command 0x0419 tx timeout [ 61.394304] Bluetooth: hci0: command 0x0419 tx timeout [ 61.395044] Bluetooth: hci2: command 0x0419 tx timeout [ 61.457345] Bluetooth: hci4: command 0x0419 tx timeout [ 61.458115] Bluetooth: hci7: command 0x0419 tx timeout [ 62.161245] Bluetooth: hci6: command 0x041b tx timeout [ 64.209283] Bluetooth: hci6: command 0x040f tx timeout [ 64.529259] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 66.257218] Bluetooth: hci6: command 0x0419 tx timeout [ 69.073397] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 73.809312] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 78.545223] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 82.961395] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 87.569340] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 90.118406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.131487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.133090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.137403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.139427] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.140959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.146175] Bluetooth: hci5: HCI_REQ-0x0c1a [ 92.177249] Bluetooth: hci5: command 0x0409 tx timeout [ 94.225266] Bluetooth: hci5: command 0x041b tx timeout [ 96.273334] Bluetooth: hci5: command 0x040f tx timeout [ 98.321257] Bluetooth: hci5: command 0x0419 tx timeout 12:40:13 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000006c0)) 12:40:13 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000006c0)) 12:40:13 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000006c0)) 12:40:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000006c0)) 12:40:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000006c0)) [ 105.107810] audit: type=1400 audit(1664714414.251:7): avc: denied { open } for pid=3570 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 105.109382] audit: type=1400 audit(1664714414.251:8): avc: denied { kernel } for pid=3570 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:40:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000640)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000006c0)) 12:40:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) syz_open_dev$sg(&(0x7f0000000600), 0x2, 0x10000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f00000006c0)) 12:40:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:40:41 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000001580)=0x6, 0x4) 12:40:41 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) 12:40:41 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000740)=0xc16, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)) 12:40:41 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) r4 = socket(0x27, 0x2, 0x1a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x60e, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) accept4(r3, &(0x7f0000000540)=@tipc=@name, &(0x7f00000005c0)=0x80, 0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:40:41 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x80) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f00000006c0)) 12:40:41 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:40:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) socketpair(0x1e, 0x5, 0x81, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000007c0)={0x3, 0xad8f, "1e7ede", 0x1, 0xcc}) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000900)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, @hci={0x1f, 0xffffffffffffffff}, @rc={0x1f, @none, 0xff}, 0xfff8, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)='syzkaller0\x00', 0x6, 0xffffffff, 0x3}) 12:40:41 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r5, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000940)=0x7ff) r7 = accept4(r5, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) connect$802154_dgram(r7, &(0x7f0000000a40)={0x24, @long}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6gre0\x00', r4, 0x0, 0x1, 0x6, 0x3ff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x700, 0x81, 0x3}}) accept$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001080)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1a8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x3, 0x9, 0x4000}]}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 12:40:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) socketpair(0x1e, 0x5, 0x81, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000007c0)={0x3, 0xad8f, "1e7ede", 0x1, 0xcc}) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000900)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, @hci={0x1f, 0xffffffffffffffff}, @rc={0x1f, @none, 0xff}, 0xfff8, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)='syzkaller0\x00', 0x6, 0xffffffff, 0x3}) 12:40:54 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000001580)=0x6, 0x4) 12:40:54 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) r4 = socket(0x27, 0x2, 0x1a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x60e, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) accept4(r3, &(0x7f0000000540)=@tipc=@name, &(0x7f00000005c0)=0x80, 0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:40:54 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000740)=0xc16, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)) 12:40:54 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r5, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000940)=0x7ff) r7 = accept4(r5, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) connect$802154_dgram(r7, &(0x7f0000000a40)={0x24, @long}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6gre0\x00', r4, 0x0, 0x1, 0x6, 0x3ff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x700, 0x81, 0x3}}) accept$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001080)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1a8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x3, 0x9, 0x4000}]}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 12:40:54 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) 12:40:54 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f00000006c0)) 12:40:54 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:40:54 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r5, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000940)=0x7ff) r7 = accept4(r5, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) connect$802154_dgram(r7, &(0x7f0000000a40)={0x24, @long}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6gre0\x00', r4, 0x0, 0x1, 0x6, 0x3ff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x700, 0x81, 0x3}}) accept$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001080)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1a8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x3, 0x9, 0x4000}]}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 12:40:55 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) 12:40:55 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000480)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f00000006c0)) 12:41:07 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r5, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000940)=0x7ff) r7 = accept4(r5, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) connect$802154_dgram(r7, &(0x7f0000000a40)={0x24, @long}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6gre0\x00', r4, 0x0, 0x1, 0x6, 0x3ff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x700, 0x81, 0x3}}) accept$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:07 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) socketpair(0x1e, 0x5, 0x81, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000007c0)={0x3, 0xad8f, "1e7ede", 0x1, 0xcc}) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000900)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, @hci={0x1f, 0xffffffffffffffff}, @rc={0x1f, @none, 0xff}, 0xfff8, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)='syzkaller0\x00', 0x6, 0xffffffff, 0x3}) 12:41:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:41:07 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:07 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000001580)=0x6, 0x4) 12:41:07 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000740)=0xc16, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)) 12:41:07 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) r4 = socket(0x27, 0x2, 0x1a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x60e, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) accept4(r3, &(0x7f0000000540)=@tipc=@name, &(0x7f00000005c0)=0x80, 0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:41:07 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000006c0)) 12:41:07 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r4, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000940)=0x7ff) r6 = accept4(r4, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) connect$802154_dgram(r6, &(0x7f0000000a40)={0x24, @long}, 0x14) accept$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:07 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r4, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000940)=0x7ff) accept4(r4, &(0x7f0000000980)=@ethernet={0x0, @link_local}, &(0x7f0000000a00)=0x80, 0x80000) accept$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:07 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) 12:41:07 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:07 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r4, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000940)=0x7ff) accept$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:07 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x1ff, 0x8, 0x9ff, 0x9, 0x8}, 0x14) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000006c0)) 12:41:07 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) syz_open_dev$sg(&(0x7f0000000640), 0x3, 0x400000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:07 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000740)=0xc16, 0x4) 12:41:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:41:18 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) 12:41:18 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000006c0)) 12:41:18 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) r4 = socket(0x27, 0x2, 0x1a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x60e, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:41:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) socketpair(0x1e, 0x5, 0x81, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000007c0)={0x3, 0xad8f, "1e7ede", 0x1, 0xcc}) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) 12:41:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:18 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) 12:41:18 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r4, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000900), 0x1, 0x80000) accept$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:18 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) openat$cgroup_procs(r4, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) accept$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:18 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) accept$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:18 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) 12:41:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x101001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:18 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x2f, 0x1, 0x42, 0x0, 0x73, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2107, 0xd53}}) accept$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:18 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) 12:41:18 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000006c0)) 12:41:18 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) 12:41:18 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0xb4, 0x3, 0x44b, 0x3, @mcast2, @remote, 0x8, 0x700, 0x80000001, 0x7}}) accept$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x1d) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:41:18 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) r4 = socket(0x27, 0x2, 0x1a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x60e, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:41:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) socketpair(0x1e, 0x5, 0x81, &(0x7f0000000780)) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) 12:41:18 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) accept4(0xffffffffffffffff, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000006c0)=0x80, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:18 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x101080) syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) 12:41:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x57, 0x6c, @buffer={0x0, 0x88, &(0x7f0000000300)=""/136}, &(0x7f00000003c0)="a365c00f1dbb8308d168287c7319ca07084c144e199bc2ac0971d888d8ba231167597219b2b54fdee92a56998813f6dd78090dcfbbe7a126e1d0d79c0a0a62f572291dd5df435478409d269e617ca4c5e464e732f96b9e", &(0x7f0000000440)=""/116, 0x800, 0x30, 0x3, &(0x7f00000004c0)}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) [ 175.569451] Bluetooth: hci3: command 0x0406 tx timeout [ 175.570428] Bluetooth: hci1: command 0x0406 tx timeout [ 175.571361] Bluetooth: hci2: command 0x0406 tx timeout [ 175.572255] Bluetooth: hci0: command 0x0406 tx timeout [ 175.573118] Bluetooth: hci7: command 0x0406 tx timeout [ 175.574010] Bluetooth: hci4: command 0x0406 tx timeout [ 179.154266] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 179.155536] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.156515] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.157863] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.159937] Call Trace: [ 179.160328] [ 179.160993] __schedule+0x893/0x2470 [ 179.161566] ? io_schedule_timeout+0x150/0x150 [ 179.162215] ? do_raw_spin_lock+0x121/0x260 [ 179.162820] ? rwlock_bug.part.0+0x90/0x90 [ 179.163443] schedule+0xda/0x1b0 [ 179.163941] rescuer_thread+0x851/0xdb0 [ 179.164541] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.165275] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.165983] ? lockdep_hardirqs_on+0x79/0x100 [ 179.166649] ? worker_thread+0x1260/0x1260 [ 179.167300] kthread+0x2ed/0x3a0 [ 179.167794] ? kthread_complete_and_exit+0x40/0x40 [ 179.168513] ret_from_fork+0x22/0x30 [ 179.169068] [ 179.169427] INFO: task rcu_par_gp:4 blocked for more than 142 seconds. [ 179.170336] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.171190] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.172441] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.173802] Call Trace: [ 179.174255] [ 179.174638] __schedule+0x893/0x2470 [ 179.175338] ? io_schedule_timeout+0x150/0x150 [ 179.176095] ? do_raw_spin_lock+0x121/0x260 [ 179.176850] ? rwlock_bug.part.0+0x90/0x90 [ 179.177588] schedule+0xda/0x1b0 [ 179.178195] rescuer_thread+0x851/0xdb0 [ 179.178882] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.179741] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.180588] ? lockdep_hardirqs_on+0x79/0x100 [ 179.181385] ? worker_thread+0x1260/0x1260 [ 179.182096] kthread+0x2ed/0x3a0 [ 179.182714] ? kthread_complete_and_exit+0x40/0x40 [ 179.183555] ret_from_fork+0x22/0x30 [ 179.184262] [ 179.184652] INFO: task slub_flushwq:5 blocked for more than 142 seconds. [ 179.185770] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.186656] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.187923] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.189303] Call Trace: [ 179.189728] [ 179.190112] __schedule+0x893/0x2470 [ 179.190795] ? io_schedule_timeout+0x150/0x150 [ 179.191581] ? do_raw_spin_lock+0x121/0x260 [ 179.192320] ? rwlock_bug.part.0+0x90/0x90 [ 179.193031] schedule+0xda/0x1b0 [ 179.193744] rescuer_thread+0x851/0xdb0 [ 179.194441] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.195310] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.196130] ? lockdep_hardirqs_on+0x79/0x100 [ 179.196917] ? worker_thread+0x1260/0x1260 [ 179.197657] kthread+0x2ed/0x3a0 [ 179.198256] ? kthread_complete_and_exit+0x40/0x40 [ 179.199076] ret_from_fork+0x22/0x30 [ 179.199743] [ 179.200130] INFO: task netns:6 blocked for more than 142 seconds. [ 179.201130] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.202014] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.203279] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.204635] Call Trace: [ 179.205064] [ 179.205486] __schedule+0x893/0x2470 [ 179.206121] ? io_schedule_timeout+0x150/0x150 [ 179.206905] ? do_raw_spin_lock+0x121/0x260 [ 179.207642] ? rwlock_bug.part.0+0x90/0x90 [ 179.208388] schedule+0xda/0x1b0 [ 179.208959] rescuer_thread+0x851/0xdb0 [ 179.209650] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.210495] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.211348] ? lockdep_hardirqs_on+0x79/0x100 [ 179.212100] ? worker_thread+0x1260/0x1260 [ 179.212816] kthread+0x2ed/0x3a0 [ 179.213409] ? kthread_complete_and_exit+0x40/0x40 [ 179.214259] ret_from_fork+0x22/0x30 [ 179.214927] [ 179.215351] INFO: task kworker/0:0:7 blocked for more than 142 seconds. [ 179.216441] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.217309] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.218528] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.219829] Workqueue: 0x0 (rcu_gp) [ 179.220492] Call Trace: [ 179.220923] [ 179.221334] __schedule+0x893/0x2470 [ 179.221970] ? io_schedule_timeout+0x150/0x150 [ 179.222796] schedule+0xda/0x1b0 [ 179.223404] worker_thread+0x15f/0x1260 [ 179.224098] ? process_one_work+0x16a0/0x16a0 [ 179.224882] kthread+0x2ed/0x3a0 [ 179.225479] ? kthread_complete_and_exit+0x40/0x40 [ 179.226318] ret_from_fork+0x22/0x30 [ 179.226987] [ 179.227419] INFO: task kworker/0:0H:8 blocked for more than 142 seconds. [ 179.228527] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.229411] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.230657] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 179.232025] Workqueue: 0x0 (events_highpri) [ 179.232786] Call Trace: [ 179.233233] [ 179.233612] __schedule+0x893/0x2470 [ 179.234269] ? io_schedule_timeout+0x150/0x150 [ 179.235045] schedule+0xda/0x1b0 [ 179.235640] worker_thread+0x15f/0x1260 [ 179.236350] ? process_one_work+0x16a0/0x16a0 [ 179.237097] kthread+0x2ed/0x3a0 [ 179.237699] ? kthread_complete_and_exit+0x40/0x40 [ 179.238529] ret_from_fork+0x22/0x30 [ 179.239213] [ 179.239600] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.240686] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.241559] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.242811] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.244111] Call Trace: [ 179.244533] [ 179.244913] __schedule+0x893/0x2470 [ 179.245550] ? io_schedule_timeout+0x150/0x150 [ 179.246299] ? do_raw_spin_lock+0x121/0x260 [ 179.246992] ? rwlock_bug.part.0+0x90/0x90 [ 179.247695] schedule+0xda/0x1b0 [ 179.248256] rescuer_thread+0x851/0xdb0 [ 179.248878] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.249682] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.250467] ? lockdep_hardirqs_on+0x79/0x100 [ 179.251205] ? worker_thread+0x1260/0x1260 [ 179.251860] kthread+0x2ed/0x3a0 [ 179.252439] ? kthread_complete_and_exit+0x40/0x40 [ 179.253259] ret_from_fork+0x22/0x30 [ 179.253874] [ 179.254287] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.255423] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.256288] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.257512] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.258842] Call Trace: [ 179.259284] [ 179.259652] __schedule+0x893/0x2470 [ 179.260307] ? io_schedule_timeout+0x150/0x150 [ 179.261034] ? mark_held_locks+0x9e/0xe0 [ 179.261729] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.262562] schedule+0xda/0x1b0 [ 179.263127] rcu_tasks_one_gp+0x3db/0xc10 [ 179.263856] rcu_tasks_kthread+0x80/0xa0 [ 179.264530] ? rcu_tasks_postscan+0x10/0x10 [ 179.265256] kthread+0x2ed/0x3a0 [ 179.265793] ? kthread_complete_and_exit+0x40/0x40 [ 179.266603] ret_from_fork+0x22/0x30 [ 179.267282] [ 179.269317] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.270392] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.271294] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.272503] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 179.273799] Workqueue: 0x0 (kblockd) [ 179.274433] Call Trace: [ 179.274852] [ 179.275257] __schedule+0x893/0x2470 [ 179.275867] ? io_schedule_timeout+0x150/0x150 [ 179.276629] schedule+0xda/0x1b0 [ 179.277205] worker_thread+0x15f/0x1260 [ 179.277860] ? process_one_work+0x16a0/0x16a0 [ 179.278603] kthread+0x2ed/0x3a0 [ 179.279197] ? kthread_complete_and_exit+0x40/0x40 [ 179.279967] ret_from_fork+0x22/0x30 [ 179.280608] [ 179.280981] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.282008] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.282843] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.284023] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.285300] Call Trace: [ 179.285695] [ 179.286058] __schedule+0x893/0x2470 [ 179.286719] ? io_schedule_timeout+0x150/0x150 [ 179.287469] ? do_raw_spin_lock+0x121/0x260 [ 179.288179] ? rwlock_bug.part.0+0x90/0x90 [ 179.288845] schedule+0xda/0x1b0 [ 179.289432] rescuer_thread+0x851/0xdb0 [ 179.290064] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.290885] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.291680] ? lockdep_hardirqs_on+0x79/0x100 [ 179.292410] ? worker_thread+0x1260/0x1260 [ 179.293060] kthread+0x2ed/0x3a0 [ 179.293630] ? kthread_complete_and_exit+0x40/0x40 [ 179.294416] ret_from_fork+0x22/0x30 [ 179.295041] [ 179.295506] [ 179.295506] Showing all locks held in the system: [ 179.296457] 1 lock held by rcu_tasks_kthre/11: [ 179.297141] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.298709] 1 lock held by khungtaskd/25: [ 179.299373] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.300777] 2 locks held by in:imklog/194: [ 179.301435] #0: ffff88800e8014e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 179.302749] #1: ffffffff853fa898 (log_wait.lock){-.-.}-{2:2}, at: try_to_wake_up+0x4f7/0x1930 [ 179.304116] 2 locks held by syz-executor/4284: [ 179.304821] [ 179.305088] ============================================= [ 179.305088] 12:41:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0xe, 0x101, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0x200, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x3, 0x6, 0x7f, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042004}, 0x8000000) r6 = accept4$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80800) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0xa37b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xebab, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @timestamp, @sack_perm], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000740)=0x2, 0x4) getsockname(r7, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000880)=0x80) 12:41:32 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="88664f0fde72a600ed2964763bcec6f5", 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xffff, 0x200000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) write$bt_hci(r1, &(0x7f0000000280)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0xffffffff, 0x1d93, "cabe73f63a889cc259d671bb170ca479"}}}, 0x20) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x53b1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x90021) 12:41:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) 12:41:32 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "1145666a1c555dc5b8940108d8ae4634b827d4dfc23ef81626714e1fb914b787bf5d850ac3291283ea702f8633221ac4d18495a2a57e5de6da2d40af2b1c221ff46e1fb621d0453cea08a366886805ed"}, 0xd8) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000006c0)) 12:41:32 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x8820, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x1000}, 0xd10, 0xffffffffffffffff, 0x3, 0x5, 0x34, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94c0}, 0xffffffffffffffff, 0xa, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x4) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x10, 0x2}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x441, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x1000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x6, 0x9, 0xfe, 0xfb, 0x0, 0x8, 0x200c8, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x85, 0x7}, 0x0, 0x1, 0x2, 0x2, 0x20, 0x4, 0x6, 0x0, 0x9}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x6}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x6147be95, 0x400000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ac59a54}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) 12:41:32 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x10000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x581840) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0xc49c229e7aa31d03, 0xfffffffffffffffb, 0x14, 0x1, @scatter={0x4, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/9, 0x9}]}, &(0x7f0000000440)="60d718ae9776fd4b13728f4a46f7ad5a2aee342f", &(0x7f0000000480)=""/63, 0x1, 0x10010, 0x3, &(0x7f00000004c0)}) accept$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) 12:41:32 executing program 2: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "dfdba8ff63f966fd", "bed8d3997b9934fa8da6adfb92188e712941e661a3b796bb8f387db36ebcac1a", "9144aa51", "377ece7c0d61a5e9"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="fc657f99483e3b25ed608b6002b3c89c", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x400, "d23a49", 0x7f, 0xaf}) r2 = socket(0x1e, 0x2, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) connect$packet(r2, &(0x7f0000000240)={0x11, 0x6, r0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x2, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) mq_timedsend(0xffffffffffffffff, &(0x7f0000000340)="4d1a36cebc3d82382ec845", 0xb, 0x101, &(0x7f0000000380)={0x0, 0x3938700}) r3 = accept4(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000480)="cc0d2368930c6f189f43c55d32cd3b33", 0x10) socket(0x27, 0x2, 0x1a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:41:32 executing program 3: accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x1, 0x80000}) r3 = socket(0x27, 0x6, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req={0x9, 0x5, 0x8}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14) r6 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000700)=0x1ff, 0x4) 12:41:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800, 0x5, 0x4c, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x7}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9e, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xfd, 0x3, 0x5d, 0x0, 0x1, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x240, 0x2, 0x1, 0x3, 0x8001, 0xff, 0x100, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/uts\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7ff, 0x6, 0x0, 0x4}, {0x200, 0x40, 0x1, 0x5}, {0xb30, 0x2, 0xe0, 0x9}, {0x41f0, 0x4, 0x4, 0x1}, {0x40, 0x4, 0xc7, 0x8}, {0x1, 0x0, 0x5, 0x27}, {0x0, 0xff, 0x8, 0x4f0c}, {0xff, 0x80, 0xff, 0x7}, {0xf24f, 0x2, 0xbf, 0xfffffffc}]}) [ 183.761259] Bluetooth: hci6: command 0x0406 tx timeout VM DIAGNOSIS: 12:41:28 Registers: info registers vcpu 0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000073 R11=0000000000000001 R12=0000000000000073 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d818fdc648 CR3=000000000f168000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 746f72702f637465 2f00656372000a23 YMM04=0000000000000000 0000000000000000 4040404040404040 4040404040404040 YMM05=0000000000000000 0000000000000000 5a5a5a5a5a5a5a5a 5a5a5a5a5a5a5a5a YMM06=0000000000000000 0000000000000000 2020202020202020 2020202020202020 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 3270682820262620 294c4c554e203d21 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff856246a0 RCX=0000000000000000 RDX=1ffffffff0ac48d4 RSI=0000000000000001 RDI=ffff88801005c954 RBP=0000000000000001 RSP=ffff888018717c10 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88801005b580 R13=ffff8880187b00f8 R14=ffff8880187b0068 R15=ffff8880187b00f8 RIP=ffffffff8214f352 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8841f1d900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f88413f56c0 CR3=000000000ebc2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 41017a4d28c70f88 71452f2b30bb0665 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec68 YMM04=0000000000000000 0000000000000000 e00d6eb81b53ed5b 0000000000137718 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 a4161c040e2915bc 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000