Warning: Permanently added '[localhost]:22519' (ECDSA) to the list of known hosts. 2022/10/01 18:29:19 fuzzer started 2022/10/01 18:29:19 dialing manager at localhost:35095 syzkaller login: [ 36.587326] cgroup: Unknown subsys name 'net' [ 36.670483] cgroup: Unknown subsys name 'rlimit' 2022/10/01 18:29:35 syscalls: 203 2022/10/01 18:29:35 code coverage: enabled 2022/10/01 18:29:35 comparison tracing: enabled 2022/10/01 18:29:35 extra coverage: enabled 2022/10/01 18:29:35 setuid sandbox: enabled 2022/10/01 18:29:35 namespace sandbox: enabled 2022/10/01 18:29:35 Android sandbox: enabled 2022/10/01 18:29:35 fault injection: enabled 2022/10/01 18:29:35 leak checking: enabled 2022/10/01 18:29:35 net packet injection: enabled 2022/10/01 18:29:35 net device setup: enabled 2022/10/01 18:29:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 18:29:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 18:29:35 USB emulation: enabled 2022/10/01 18:29:35 hci packet injection: enabled 2022/10/01 18:29:35 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 18:29:35 802.15.4 emulation: enabled 2022/10/01 18:29:35 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 18:29:36 starting 8 fuzzer processes 18:29:36 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x84040}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7) 18:29:36 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000004c0)={0x0, 0x5, 0x1f, 0x6, 0x17, 0x5}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x88000004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:29:36 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r2, 0x5308) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r4, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x208, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004800) 18:29:36 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000840), 0x2, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) [ 52.832602] audit: type=1400 audit(1664648976.736:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:29:36 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0), 0xc, &(0x7f00000016c0)={&(0x7f0000000c40)={0xa44, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64eb9c23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x0, 0x6b, 0x7fffffff}, {0x101, 0xd6, 0x1f, 0x6}, {0x6, 0x6, 0x99, 0x800}, {0x5, 0x3, 0x4f}, {0xff, 0x7, 0xfe, 0x14c98910}, {0x1, 0x0, 0x4}, {0x3f, 0x3f, 0x1, 0x6}, {0x2, 0x7, 0x3, 0x2dbc}, {0x1, 0x3f, 0x1, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9580}}}]}}, {{0x8, 0x1, r16}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0xa44}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000080) 18:29:36 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff}) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @xdp={0x2c, 0x9, 0x0, 0x7}, @llc={0x1a, 0x10f, 0x7f, 0x80, 0x1, 0x29, @random="c4020288c49c"}, 0x5, 0x0, 0x0, 0x0, 0xfc0f, &(0x7f00000018c0)='ip6_vti0\x00', 0x4, 0x8}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x424, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc61}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c1d7e66}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f43}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x442a7e9c}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x3f, 0x1, 0x9}, {0x7, 0x6, 0x8, 0xade2}, {0x0, 0x1f, 0x81, 0x7ff}, {0x101, 0x55, 0xff, 0xfcf8}, {0x22eb, 0x7, 0x0, 0x2765}, {0x8001, 0x80, 0x9, 0x7}, {0x3, 0x1f, 0x3, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x5}, 0x4880) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002380)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000001fc0)={0x37c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9707}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) 18:29:36 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000885) socketpair(0x7, 0x6, 0x8000, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0x1) 18:29:36 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) openat$cgroup_freezer_state(r3, &(0x7f0000001980), 0x2, 0x0) get_mempolicy(&(0x7f00000019c0), &(0x7f0000001a00), 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000001a40), 0x2, 0x0) write$cgroup_freezer_state(r11, &(0x7f0000001a80)='FROZEN\x00', 0x7) [ 54.128270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.130595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.133108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.134721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.157594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.159003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.160931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.162820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.166540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.167621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.168742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.170716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.171953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.173844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.173878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.176114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.177340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.178425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.179841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.183017] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.184431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.186307] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.187670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.194624] Bluetooth: hci1: HCI_REQ-0x0c1a [ 54.196443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.200125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.205695] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.206773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.208363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.209930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.212495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.231957] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.234586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.239398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.240604] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.241753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.242944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.245258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.246808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.251642] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.252114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.261403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.265576] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.267105] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.269467] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.281047] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.283051] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.287236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.298660] Bluetooth: hci5: HCI_REQ-0x0c1a [ 56.246501] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 56.248453] Bluetooth: hci0: command 0x0409 tx timeout [ 56.249807] Bluetooth: hci1: command 0x0409 tx timeout [ 56.250709] Bluetooth: hci2: command 0x0409 tx timeout [ 56.310613] Bluetooth: hci6: command 0x0409 tx timeout [ 56.311613] Bluetooth: hci3: command 0x0409 tx timeout [ 56.312645] Bluetooth: hci4: command 0x0409 tx timeout [ 56.374324] Bluetooth: hci5: command 0x0409 tx timeout [ 58.294720] Bluetooth: hci2: command 0x041b tx timeout [ 58.295587] Bluetooth: hci1: command 0x041b tx timeout [ 58.296765] Bluetooth: hci0: command 0x041b tx timeout [ 58.358716] Bluetooth: hci4: command 0x041b tx timeout [ 58.360010] Bluetooth: hci3: command 0x041b tx timeout [ 58.360748] Bluetooth: hci6: command 0x041b tx timeout [ 58.422263] Bluetooth: hci5: command 0x041b tx timeout [ 60.342521] Bluetooth: hci0: command 0x040f tx timeout [ 60.342569] Bluetooth: hci1: command 0x040f tx timeout [ 60.342959] Bluetooth: hci2: command 0x040f tx timeout [ 60.406263] Bluetooth: hci6: command 0x040f tx timeout [ 60.406492] Bluetooth: hci3: command 0x040f tx timeout [ 60.406744] Bluetooth: hci4: command 0x040f tx timeout [ 60.470197] Bluetooth: hci5: command 0x040f tx timeout [ 61.046251] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 62.390464] Bluetooth: hci2: command 0x0419 tx timeout [ 62.391212] Bluetooth: hci1: command 0x0419 tx timeout [ 62.391221] Bluetooth: hci0: command 0x0419 tx timeout [ 62.454195] Bluetooth: hci4: command 0x0419 tx timeout [ 62.455213] Bluetooth: hci3: command 0x0419 tx timeout [ 62.455222] Bluetooth: hci6: command 0x0419 tx timeout [ 62.518195] Bluetooth: hci5: command 0x0419 tx timeout [ 63.530759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.548927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.569433] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.585456] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.593376] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.601970] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.613230] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.654278] Bluetooth: hci7: command 0x0409 tx timeout [ 67.703221] Bluetooth: hci7: command 0x041b tx timeout [ 69.751300] Bluetooth: hci7: command 0x040f tx timeout [ 71.799259] Bluetooth: hci7: command 0x0419 tx timeout 18:30:30 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff}) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @xdp={0x2c, 0x9, 0x0, 0x7}, @llc={0x1a, 0x10f, 0x7f, 0x80, 0x1, 0x29, @random="c4020288c49c"}, 0x5, 0x0, 0x0, 0x0, 0xfc0f, &(0x7f00000018c0)='ip6_vti0\x00', 0x4, 0x8}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x424, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc61}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c1d7e66}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f43}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x442a7e9c}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x3f, 0x1, 0x9}, {0x7, 0x6, 0x8, 0xade2}, {0x0, 0x1f, 0x81, 0x7ff}, {0x101, 0x55, 0xff, 0xfcf8}, {0x22eb, 0x7, 0x0, 0x2765}, {0x8001, 0x80, 0x9, 0x7}, {0x3, 0x1f, 0x3, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x5}, 0x4880) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002380)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000001fc0)={0x37c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9707}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) 18:30:30 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff}) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @xdp={0x2c, 0x9, 0x0, 0x7}, @llc={0x1a, 0x10f, 0x7f, 0x80, 0x1, 0x29, @random="c4020288c49c"}, 0x5, 0x0, 0x0, 0x0, 0xfc0f, &(0x7f00000018c0)='ip6_vti0\x00', 0x4, 0x8}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x424, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc61}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c1d7e66}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f43}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x442a7e9c}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x3f, 0x1, 0x9}, {0x7, 0x6, 0x8, 0xade2}, {0x0, 0x1f, 0x81, 0x7ff}, {0x101, 0x55, 0xff, 0xfcf8}, {0x22eb, 0x7, 0x0, 0x2765}, {0x8001, 0x80, 0x9, 0x7}, {0x3, 0x1f, 0x3, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x5}, 0x4880) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002380)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000001fc0)={0x37c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9707}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) 18:30:30 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff}) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @xdp={0x2c, 0x9, 0x0, 0x7}, @llc={0x1a, 0x10f, 0x7f, 0x80, 0x1, 0x29, @random="c4020288c49c"}, 0x5, 0x0, 0x0, 0x0, 0xfc0f, &(0x7f00000018c0)='ip6_vti0\x00', 0x4, 0x8}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x424, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc61}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c1d7e66}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f43}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x442a7e9c}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x3f, 0x1, 0x9}, {0x7, 0x6, 0x8, 0xade2}, {0x0, 0x1f, 0x81, 0x7ff}, {0x101, 0x55, 0xff, 0xfcf8}, {0x22eb, 0x7, 0x0, 0x2765}, {0x8001, 0x80, 0x9, 0x7}, {0x3, 0x1f, 0x3, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x5}, 0x4880) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002380)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000001fc0)={0x37c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9707}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) 18:30:30 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff}) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @xdp={0x2c, 0x9, 0x0, 0x7}, @llc={0x1a, 0x10f, 0x7f, 0x80, 0x1, 0x29, @random="c4020288c49c"}, 0x5, 0x0, 0x0, 0x0, 0xfc0f, &(0x7f00000018c0)='ip6_vti0\x00', 0x4, 0x8}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x424, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc61}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c1d7e66}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f43}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x442a7e9c}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x3f, 0x1, 0x9}, {0x7, 0x6, 0x8, 0xade2}, {0x0, 0x1f, 0x81, 0x7ff}, {0x101, 0x55, 0xff, 0xfcf8}, {0x22eb, 0x7, 0x0, 0x2765}, {0x8001, 0x80, 0x9, 0x7}, {0x3, 0x1f, 0x3, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x5}, 0x4880) 18:30:31 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @xdp={0x2c, 0x9, 0x0, 0x7}, @llc={0x1a, 0x10f, 0x7f, 0x80, 0x1, 0x29, @random="c4020288c49c"}, 0x5, 0x0, 0x0, 0x0, 0xfc0f, &(0x7f00000018c0)='ip6_vti0\x00', 0x4, 0x8}) [ 107.453367] audit: type=1400 audit(1664649031.357:7): avc: denied { map } for pid=3799 comm="syz-executor.2" path="/proc/3799/task/3800/attr/keycreate" dev="proc" ino=13624 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 112.834374] audit: type=1400 audit(1664649036.738:8): avc: denied { checkpoint_restore } for pid=4027 comm="syz-executor.7" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 18:30:52 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) openat$cgroup_freezer_state(r3, &(0x7f0000001980), 0x2, 0x0) get_mempolicy(&(0x7f00000019c0), &(0x7f0000001a00), 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000001a40), 0x2, 0x0) write$cgroup_freezer_state(r11, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:30:52 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x84040}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7) 18:30:52 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0), 0xc, &(0x7f00000016c0)={&(0x7f0000000c40)={0xa44, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64eb9c23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x0, 0x6b, 0x7fffffff}, {0x101, 0xd6, 0x1f, 0x6}, {0x6, 0x6, 0x99, 0x800}, {0x5, 0x3, 0x4f}, {0xff, 0x7, 0xfe, 0x14c98910}, {0x1, 0x0, 0x4}, {0x3f, 0x3f, 0x1, 0x6}, {0x2, 0x7, 0x3, 0x2dbc}, {0x1, 0x3f, 0x1, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9580}}}]}}, {{0x8, 0x1, r16}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0xa44}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000080) 18:30:52 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000885) socketpair(0x7, 0x6, 0x8000, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0x1) 18:30:52 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)) 18:30:52 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r2, 0x5308) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r4, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x208, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004800) 18:30:52 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000840), 0x2, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 18:30:52 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000004c0)={0x0, 0x5, 0x1f, 0x6, 0x17, 0x5}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x88000004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:30:53 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001600)=0x3) 18:30:53 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0), 0xc, &(0x7f00000016c0)={&(0x7f0000000c40)={0xa44, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64eb9c23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x0, 0x6b, 0x7fffffff}, {0x101, 0xd6, 0x1f, 0x6}, {0x6, 0x6, 0x99, 0x800}, {0x5, 0x3, 0x4f}, {0xff, 0x7, 0xfe, 0x14c98910}, {0x1, 0x0, 0x4}, {0x3f, 0x3f, 0x1, 0x6}, {0x2, 0x7, 0x3, 0x2dbc}, {0x1, 0x3f, 0x1, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9580}}}]}}, {{0x8, 0x1, r16}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0xa44}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000080) 18:30:53 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000004c0)={0x0, 0x5, 0x1f, 0x6, 0x17, 0x5}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x88000004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:06 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000885) socketpair(0x7, 0x6, 0x8000, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0x1) 18:31:06 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000004c0)={0x0, 0x5, 0x1f, 0x6, 0x17, 0x5}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x88000004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:06 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0), 0xc, &(0x7f00000016c0)={&(0x7f0000000c40)={0xa44, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64eb9c23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x0, 0x6b, 0x7fffffff}, {0x101, 0xd6, 0x1f, 0x6}, {0x6, 0x6, 0x99, 0x800}, {0x5, 0x3, 0x4f}, {0xff, 0x7, 0xfe, 0x14c98910}, {0x1, 0x0, 0x4}, {0x3f, 0x3f, 0x1, 0x6}, {0x2, 0x7, 0x3, 0x2dbc}, {0x1, 0x3f, 0x1, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9580}}}]}}, {{0x8, 0x1, r16}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0xa44}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000080) 18:31:06 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000001580)={0x9, 0x9, 0x401, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:06 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r2, 0x5308) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r4, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x208, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004800) 18:31:06 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) openat$cgroup_freezer_state(r3, &(0x7f0000001980), 0x2, 0x0) get_mempolicy(&(0x7f00000019c0), &(0x7f0000001a00), 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000001a40), 0x2, 0x0) write$cgroup_freezer_state(r11, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:06 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000840), 0x2, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 18:31:06 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x84040}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7) 18:31:07 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0), 0xc, &(0x7f00000016c0)={&(0x7f0000000c40)={0xa44, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64eb9c23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x0, 0x6b, 0x7fffffff}, {0x101, 0xd6, 0x1f, 0x6}, {0x6, 0x6, 0x99, 0x800}, {0x5, 0x3, 0x4f}, {0xff, 0x7, 0xfe, 0x14c98910}, {0x1, 0x0, 0x4}, {0x3f, 0x3f, 0x1, 0x6}, {0x2, 0x7, 0x3, 0x2dbc}, {0x1, 0x3f, 0x1, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9580}}}]}}, {{0x8, 0x1, r16}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0xa44}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) 18:31:07 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) syz_open_dev$evdev(&(0x7f0000001540), 0x8001, 0x101000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:07 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) openat$cgroup_freezer_state(r3, &(0x7f0000001980), 0x2, 0x0) get_mempolicy(&(0x7f00000019c0), &(0x7f0000001a00), 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000001a40), 0x2, 0x0) write$cgroup_freezer_state(r11, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:07 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r2, 0x5308) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r4, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x208, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004800) 18:31:07 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000885) socketpair(0x7, 0x6, 0x8000, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0x1) 18:31:07 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000840), 0x2, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 18:31:07 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x84040}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7) 18:31:07 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000004c0)={0x0, 0x5, 0x1f, 0x6, 0x17, 0x5}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:07 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:22 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000840), 0x2, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) 18:31:22 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00'}) 18:31:22 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000004c0)={0x0, 0x5, 0x1f, 0x6, 0x17, 0x5}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:22 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:22 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r3, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) ioctl$CDROM_MEDIA_CHANGED(r3, 0x5325, 0x4) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) 18:31:22 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000885) socketpair(0x7, 0x6, 0x8000, &(0x7f00000006c0)) 18:31:22 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x84040}, 0x1) 18:31:22 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) openat$cgroup_freezer_state(r3, &(0x7f0000001980), 0x2, 0x0) get_mempolicy(&(0x7f00000019c0), &(0x7f0000001a00), 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:23 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r3, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) ioctl$CDROM_MEDIA_CHANGED(r3, 0x5325, 0x4) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 18:31:23 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)) 18:31:23 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:37 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00'}) 18:31:37 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) openat$cgroup_freezer_state(r3, &(0x7f0000001980), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:37 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)) 18:31:37 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r3, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/205) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 18:31:37 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000885) 18:31:37 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) socketpair(0x25, 0x1, 0x1ff, &(0x7f0000001340)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:37 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:37 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000840), 0x2, 0x0) 18:31:37 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:37 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r3, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/45, 0x2d, 0x1, &(0x7f0000000300)=""/34, 0x22}, &(0x7f0000000380)=0x40) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 18:31:37 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00'}) 18:31:37 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) r10 = pidfd_getfd(r9, r2, 0x0) syz_io_uring_setup(0x8b5, &(0x7f0000001880)={0x0, 0x8453, 0x0, 0x1, 0x137, 0x0, r10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000001900), &(0x7f0000001940)) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:37 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:37 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) socketpair(0x2, 0x1, 0x9, &(0x7f0000000dc0)) 18:31:37 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = socket(0x0, 0xa, 0x80000001) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1004}, 0x9ba878211e0fb33a) connect$bt_sco(r0, &(0x7f0000000580), 0x8) 18:31:37 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)) 18:31:37 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2, 0x7fffffff]) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:37 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) 18:31:37 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:37 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r3, 0x5308) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x100010, r3, 0x0) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 18:31:37 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r3}}, 0x58) r6 = getpgrp(0x0) r7 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r4, r1, r5, r6], 0x5, {r3}}, 0x58) r8 = getpgrp(r7) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r8], 0x1, {r3}}, 0x58) pidfd_getfd(r9, r2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:38 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @ax25={0x3, @null, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x33}, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x7fffffff, 0x7}) 18:31:38 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:38 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00') setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) [ 179.638409] Bluetooth: hci4: command 0x0406 tx timeout [ 179.639369] Bluetooth: hci1: command 0x0406 tx timeout [ 179.640280] Bluetooth: hci2: command 0x0406 tx timeout [ 179.641166] Bluetooth: hci6: command 0x0406 tx timeout [ 179.641998] Bluetooth: hci5: command 0x0406 tx timeout [ 179.642899] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.644040] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.644939] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.646227] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.647841] Call Trace: [ 179.648646] [ 179.649013] __schedule+0x893/0x2470 [ 179.649910] ? io_schedule_timeout+0x150/0x150 [ 179.650619] ? do_raw_spin_lock+0x121/0x260 [ 179.651291] ? rwlock_bug.part.0+0x90/0x90 [ 179.651934] schedule+0xda/0x1b0 [ 179.652467] rescuer_thread+0x851/0xdb0 [ 179.653073] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.653832] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.654594] ? lockdep_hardirqs_on+0x79/0x100 [ 179.655285] ? worker_thread+0x1260/0x1260 [ 179.655913] kthread+0x2ed/0x3a0 [ 179.656447] ? kthread_complete_and_exit+0x40/0x40 [ 179.657225] ret_from_fork+0x22/0x30 [ 179.657799] [ 179.658176] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.659092] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.659879] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.660987] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.662214] Call Trace: [ 179.662599] [ 179.662951] __schedule+0x893/0x2470 [ 179.663552] ? io_schedule_timeout+0x150/0x150 [ 179.664250] ? do_raw_spin_lock+0x121/0x260 [ 179.664893] ? rwlock_bug.part.0+0x90/0x90 [ 179.665567] schedule+0xda/0x1b0 [ 179.666082] rescuer_thread+0x851/0xdb0 [ 179.666694] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.667463] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.668231] ? lockdep_hardirqs_on+0x79/0x100 [ 179.668901] ? worker_thread+0x1260/0x1260 [ 179.669588] kthread+0x2ed/0x3a0 [ 179.670102] ? kthread_complete_and_exit+0x40/0x40 [ 179.670849] ret_from_fork+0x22/0x30 [ 179.671461] [ 179.671818] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.672796] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.673597] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.674716] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.675947] Call Trace: [ 179.676350] [ 179.676704] __schedule+0x893/0x2470 [ 179.677315] ? io_schedule_timeout+0x150/0x150 [ 179.677997] ? do_raw_spin_lock+0x121/0x260 [ 179.678669] ? rwlock_bug.part.0+0x90/0x90 [ 179.679351] schedule+0xda/0x1b0 [ 179.679873] rescuer_thread+0x851/0xdb0 [ 179.680509] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.681293] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.682041] ? lockdep_hardirqs_on+0x79/0x100 [ 179.682750] ? worker_thread+0x1260/0x1260 [ 179.683420] kthread+0x2ed/0x3a0 [ 179.683941] ? kthread_complete_and_exit+0x40/0x40 [ 179.684703] ret_from_fork+0x22/0x30 [ 179.685347] [ 179.685704] INFO: task netns:6 blocked for more than 143 seconds. [ 179.686611] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.687413] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.688546] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.689801] Call Trace: [ 179.690211] [ 179.690561] __schedule+0x893/0x2470 [ 179.691165] ? io_schedule_timeout+0x150/0x150 [ 179.691862] ? do_raw_spin_lock+0x121/0x260 [ 179.692540] ? rwlock_bug.part.0+0x90/0x90 [ 179.693232] schedule+0xda/0x1b0 [ 179.693754] rescuer_thread+0x851/0xdb0 [ 179.694384] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.695131] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.695201] Bluetooth: hci0: command 0x0406 tx timeout [ 179.695891] ? lockdep_hardirqs_on+0x79/0x100 [ 179.696326] Bluetooth: hci3: command 0x0406 tx timeout [ 179.696963] ? worker_thread+0x1260/0x1260 [ 179.697964] kthread+0x2ed/0x3a0 [ 179.698523] ? kthread_complete_and_exit+0x40/0x40 [ 179.699270] ret_from_fork+0x22/0x30 [ 179.699845] [ 179.700215] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 179.701195] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.701955] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.703060] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.704246] Workqueue: 0x0 (ata_sff) [ 179.704814] Call Trace: [ 179.705230] [ 179.705569] __schedule+0x893/0x2470 [ 179.706130] ? io_schedule_timeout+0x150/0x150 [ 179.706851] schedule+0xda/0x1b0 [ 179.707401] worker_thread+0x15f/0x1260 [ 179.708034] ? process_one_work+0x16a0/0x16a0 [ 179.708754] kthread+0x2ed/0x3a0 [ 179.709323] ? kthread_complete_and_exit+0x40/0x40 [ 179.710064] ret_from_fork+0x22/0x30 [ 179.710687] [ 179.711037] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.711996] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.712783] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.713891] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 179.715075] Workqueue: 0x0 (kblockd) [ 179.715665] Call Trace: [ 179.716037] [ 179.716404] __schedule+0x893/0x2470 [ 179.716975] ? io_schedule_timeout+0x150/0x150 [ 179.717701] schedule+0xda/0x1b0 [ 179.718241] worker_thread+0x15f/0x1260 [ 179.718851] ? process_one_work+0x16a0/0x16a0 [ 179.719548] kthread+0x2ed/0x3a0 [ 179.720058] ? kthread_complete_and_exit+0x40/0x40 [ 179.720790] ret_from_fork+0x22/0x30 [ 179.721399] [ 179.721747] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.722726] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.723499] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.724600] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.725787] Call Trace: [ 179.726184] [ 179.726525] __schedule+0x893/0x2470 [ 179.727080] ? io_schedule_timeout+0x150/0x150 [ 179.727766] ? do_raw_spin_lock+0x121/0x260 [ 179.728420] ? rwlock_bug.part.0+0x90/0x90 [ 179.729076] schedule+0xda/0x1b0 [ 179.729622] rescuer_thread+0x851/0xdb0 [ 179.730242] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.730967] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.731718] ? lockdep_hardirqs_on+0x79/0x100 [ 179.732426] ? worker_thread+0x1260/0x1260 [ 179.733063] kthread+0x2ed/0x3a0 [ 179.733597] ? kthread_complete_and_exit+0x40/0x40 [ 179.734347] ret_from_fork+0x22/0x30 [ 179.734922] [ 179.735292] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.736309] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.737082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.738185] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.739385] Call Trace: [ 179.739752] [ 179.740091] __schedule+0x893/0x2470 [ 179.740702] ? io_schedule_timeout+0x150/0x150 [ 179.741411] ? mark_held_locks+0x9e/0xe0 [ 179.742015] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.742819] schedule+0xda/0x1b0 [ 179.743361] rcu_tasks_one_gp+0x3db/0xc10 [ 179.744015] rcu_tasks_kthread+0x80/0xa0 [ 179.744655] ? rcu_tasks_postscan+0x10/0x10 [ 179.745348] kthread+0x2ed/0x3a0 [ 179.745857] ? kthread_complete_and_exit+0x40/0x40 [ 179.746619] ret_from_fork+0x22/0x30 [ 179.747236] [ 179.763184] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 179.764183] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.764952] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.766119] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 179.767378] Workqueue: 0x0 (rcu_gp) [ 179.767931] Call Trace: [ 179.768346] [ 179.768692] __schedule+0x893/0x2470 [ 179.769326] ? io_schedule_timeout+0x150/0x150 [ 179.770060] schedule+0xda/0x1b0 [ 179.770650] worker_thread+0x15f/0x1260 [ 179.771343] ? process_one_work+0x16a0/0x16a0 [ 179.772057] kthread+0x2ed/0x3a0 [ 179.772653] ? kthread_complete_and_exit+0x40/0x40 [ 179.773474] ret_from_fork+0x22/0x30 [ 179.774095] [ 179.774512] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.775570] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.776420] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.777642] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.778952] Workqueue: 0x0 (events_highpri) [ 179.779678] Call Trace: [ 179.780078] [ 179.780477] __schedule+0x893/0x2470 [ 179.781084] ? io_schedule_timeout+0x150/0x150 [ 179.781879] schedule+0xda/0x1b0 [ 179.782464] worker_thread+0x15f/0x1260 [ 179.783113] ? process_one_work+0x16a0/0x16a0 [ 179.783859] kthread+0x2ed/0x3a0 [ 179.784439] ? kthread_complete_and_exit+0x40/0x40 [ 179.785265] ret_from_fork+0x22/0x30 [ 179.785882] [ 179.786361] [ 179.786361] Showing all locks held in the system: [ 179.787328] 1 lock held by rcu_tasks_kthre/11: [ 179.788018] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.789582] 1 lock held by khungtaskd/25: [ 179.790263] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.791713] 1 lock held by in:imklog/211: [ 179.792384] #0: ffff88800eedc0e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 179.793765] 2 locks held by syz-executor/4454: [ 179.794498] [ 179.794770] ============================================= [ 179.794770] [ 187.830382] Bluetooth: hci7: command 0x0406 tx timeout 18:31:52 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/201) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) r4 = fork() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000091}, 0x44805) r5 = syz_open_procfs(r4, &(0x7f0000000640)='net/rpc\x00') r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20200a00}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028005}, 0x20081) openat$cgroup_freezer_state(r5, &(0x7f0000000800), 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 18:31:52 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x1, 0x0, 0x32}, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='batadv0\x00', 0x8, 0x1, 0x4}) r3 = socket(0x3b, 0xf, 0x6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40045) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) r5 = clone3(&(0x7f0000000a00)={0x20000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x24}, &(0x7f00000007c0)=""/251, 0xfb, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r6 = fcntl$getown(r4, 0x9) clone3(&(0x7f0000000ac0)={0x2000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2c}, &(0x7f00000005c0)=""/233, 0xe9, &(0x7f00000006c0)=""/1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/96, 0x60, 0x0, &(0x7f0000000bc0)=""/219, 0xdb}, &(0x7f0000000d00)=0x40) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x4c) 18:31:52 executing program 5: socketpair(0x2c, 0x1, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x400400, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x16052c36f31981b7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) socketpair(0x15, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) socket(0x0, 0xa, 0x80000001) syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) connect$bt_sco(r0, &(0x7f0000000580), 0x8) 18:31:52 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/108) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) 18:31:52 executing program 1: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048083) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000003c0)={0x9, 0x53e}) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r4, &(0x7f0000000400)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) 18:31:52 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000740), &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)) 18:31:52 executing program 7: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r3 = fork() clone3(&(0x7f0000001500)={0x37c32ffda3445286, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x41}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/248, &(0x7f00000014c0)=[r1], 0x1, {r2}}, 0x58) r5 = getpgrp(0x0) r6 = clone3(&(0x7f00000015c0)={0x8000400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/31, 0x1f, &(0x7f0000000200)=""/205, &(0x7f0000001580)=[r1, r3, r1, r4, r5], 0x5, {r2}}, 0x58) r7 = getpgrp(r6) clone3(&(0x7f0000001800)={0x100000400, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0), {0x2a}, &(0x7f0000001700)=""/86, 0x56, &(0x7f0000001780)=""/4, &(0x7f00000017c0)=[r7], 0x1, {r2}}, 0x58) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001a80)='FROZEN\x00', 0x7) 18:31:52 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x0, 0xffff, 0x4, 0x0, 0x8, 0xfffff800}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x2, 0xdb, 0x3, 0x6, 0xd5, 0x6}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/168) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc98880, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') ioctl$CDROMSTART(r3, 0x5308) syz_io_uring_setup(0x48d5, &(0x7f00000004c0)={0x0, 0x6c52, 0x1326d8491e2725e1, 0x3, 0x30f, 0x0, r0}, &(0x7f000081a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 18:31:52 executing program 6: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x4, 0x0, 0x972, 0x3, 0x6, 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/187) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x7, 0x80000000]) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/151) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000015c0)={0x3f, 'dc '}, 0x6) VM DIAGNOSIS: 18:31:43 Registers: info registers vcpu 0 RAX=1ffff11006ab6095 RBX=ffffc90004cce650 RCX=ffffffff817bd091 RDX=1ffff11006ab6000 RSI=0000000000000008 RDI=ffff8880355b0000 RBP=dffffc0000000000 RSP=ffff8880388dfaa0 R8 =0000000000000000 R9 =ffff8880355b0007 R10=ffffed1006ab6000 R11=0000000000000001 R12=ffffc90004cceff9 R13=ffff8880355b0000 R14=0000000000000000 R15=0000000000000086 RIP=ffffffff817bd374 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555574b7400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc71108080 CR3=000000001db12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000700000005 0000000200000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000b0000000a 0000000800000000 YMM04=0000000000000000 0000000000000000 6567206365786508 0065676169727420 YMM05=0000000000000000 0000000000000000 74616469646e6163 20636578650e006e YMM06=0000000000000000 0000000000000000 657a696d696e696d 20636578650d0065 YMM07=0000000000000000 0000000000000000 78650a0073746e69 6820636578650a00 YMM08=0000000000000000 0000000000000000 7a75662063657865 09006873616d7320 YMM09=0000000000000000 0000000000000000 0800656761697274 20636578650b007a YMM10=0000000000000000 0000000000000000 6320636578650e00 6e65672063657865 YMM11=0000000000000000 0000000000000000 6d20636578650d00 6574616469646e61 YMM12=0000000000000000 0000000000000000 696820636578650a 00657a696d696e69 YMM13=0000000000000000 0000000000000000 0073646565732063 6578650a0073746e YMM14=0000000000000000 0000000000000000 65786511006c6174 6f7420636578650a YMM15=0000000000000000 0000000000000000 0000737472617473 657220726f747563 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561dad2eb700 CR3=0000000018708000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4140d8f400000000 YMM03=0000000000000000 0000000000000000 4f0ce826dbdcc467 18942bf7e934f3a7 YMM04=0000000000000000 0000000000000000 e2c680e0e8bc73c7 9a7ac3c8909c270e YMM05=0000000000000000 0000000000000000 0a07c96057f6f4b8 f4e940dc729c0d6c YMM06=0000000000000000 0000000000000000 26cb14c73b0d412f d67af381cad38ac2 YMM07=0000000000000000 0000000000000000 761d0962f2b53020 5721c44c0cd3f9fe YMM08=0000000000000000 0000000000000000 3147c3425491ea68 b56a1b30b1332d9f YMM09=0000000000000000 0000000000000000 ecab4334d63cc83a be5072a5a3ca58ae YMM10=0000000000000000 0000000000000000 8eaa593fe3994c71 22a1c650c8bea16f YMM11=0000000000000000 0000000000000000 7814de4811df5438 8be67b1790c4618a YMM12=0000000000000000 0000000000000000 59ffd8944e039894 9bf12f40344fcf40 YMM13=0000000000000000 0000000000000000 5f5445475f444d43 5f56444154414224 YMM14=0000000000000000 0000000000000000 6666783028534741 4c465f545341434d YMM15=0000000000000000 0000000000000000 202c666666666666 6666666666666666