x00', 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x9, 0x4, 0x3, 0xffffffffffffffc0, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r7, r6}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$team(&(0x7f0000000940), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x80, 0x8, 0x40, 0x7, {{0x25, 0x4, 0x1, 0x8, 0x94, 0x67, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0xb, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @noop, @ssrr={0x89, 0x23, 0x65, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @local, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @noop, @ssrr={0x89, 0x1f, 0xea, [@remote, @broadcast, @multicast1, @broadcast, @empty, @empty, @private=0xa010100]}, @rr={0x7, 0x27, 0xd9, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x9, 0x0, [{0x5, 0x3, '}'}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000011c0)={0x5ec, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa90d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0x20, 0x7, 0xfffeffff}, {0x400, 0x7d, 0x4, 0x7f}, {0x3ff, 0x1, 0xab, 0x3ff}, {0x7f, 0xc4, 0x46, 0xfffffffd}, {0x4, 0x2, 0xb5, 0x6}, {0x9, 0x3f, 0x3a, 0x41b}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x2040}, 0x4040040) socketpair(0x5f587d36d07a3d4d, 0x3, 0x9, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='%%\x00\x00', @ANYRES16=r18, @ANYBLOB="000127bd7000000000000e000000080032000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r17, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r18, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x4040804) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (rerun: 64) 00:59:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xbe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x34b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xffffffffffffffd1) 00:59:16 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202140a0}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029bd7000fbdbdf2531000000050033000900000008000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="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"/304], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x90) 00:59:16 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7808, 0x7, 0x5, 0xffffffff, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x14, [@private=0xa010102, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x13, 0x1, [{0x1, 0xd, "431931c7382e4eead0d086"}]}, @rr={0x7, 0x17, 0xdf, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0xc, "54410c438102bfd966fb"}, {0x6, 0xc, "9d1908ff64c4b1d5146f"}]}]}}}}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)={0xaf8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8000, 0x40, 0x6, 0x1}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x57}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x7, 0x1f, 0x2}, {0xffff, 0x6, 0x0, 0x8}, {0x8, 0x2, 0x1f, 0xd1a5}, {0x34c, 0x6, 0x5, 0x8380}, {0x5, 0x18, 0x3f, 0xffffffff}, {0xffff, 0x7f, 0x8, 0x403}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3b5b89b0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x20, 0x2, 0x6}, {0xfffd, 0x4, 0x9, 0x2}, {0x0, 0x9, 0x3, 0x1}, {0x7fff, 0x7, 0x3, 0x9}, {0xf23c, 0xff, 0x53}, {0x8, 0x9d, 0x0, 0x5}, {0x9, 0x0, 0x41, 0x400}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x1b8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3c55, 0x3f, 0x2c, 0x200}, {0x0, 0x3, 0x4f, 0x6}, {0x9, 0xea, 0x13, 0x40}, {0x8, 0x15, 0x5, 0x5}, {0x1, 0x2, 0x80, 0x401}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0xaf8}, 0x1, 0x0, 0x0, 0x4040110}, 0x4000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000a, 0x10, r1, 0x10001) 00:59:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 4) [ 3556.465649][T21674] FAULT_INJECTION: forcing a failure. [ 3556.465649][T21674] name failslab, interval 1, probability 0, space 0, times 0 00:59:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff86) 00:59:16 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r16, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:16 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7808, 0x7, 0x5, 0xffffffff, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x14, [@private=0xa010102, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x13, 0x1, [{0x1, 0xd, "431931c7382e4eead0d086"}]}, @rr={0x7, 0x17, 0xdf, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0xc, "54410c438102bfd966fb"}, {0x6, 0xc, "9d1908ff64c4b1d5146f"}]}]}}}}}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)={0xaf8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8000, 0x40, 0x6, 0x1}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x57}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x7, 0x1f, 0x2}, {0xffff, 0x6, 0x0, 0x8}, {0x8, 0x2, 0x1f, 0xd1a5}, {0x34c, 0x6, 0x5, 0x8380}, {0x5, 0x18, 0x3f, 0xffffffff}, {0xffff, 0x7f, 0x8, 0x403}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3b5b89b0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x20, 0x2, 0x6}, {0xfffd, 0x4, 0x9, 0x2}, {0x0, 0x9, 0x3, 0x1}, {0x7fff, 0x7, 0x3, 0x9}, {0xf23c, 0xff, 0x53}, {0x8, 0x9d, 0x0, 0x5}, {0x9, 0x0, 0x41, 0x400}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x1b8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3c55, 0x3f, 0x2c, 0x200}, {0x0, 0x3, 0x4f, 0x6}, {0x9, 0xea, 0x13, 0x40}, {0x8, 0x15, 0x5, 0x5}, {0x1, 0x2, 0x80, 0x401}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0xaf8}, 0x1, 0x0, 0x0, 0x4040110}, 0x4000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000a, 0x10, r1, 0x10001) [ 3556.478674][T21674] CPU: 1 PID: 21674 Comm: syz-executor.1 Not tainted 6.1.29-syzkaller #0 [ 3556.480623][T21674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3556.482911][T21674] Call trace: [ 3556.483692][T21674] dump_backtrace+0x1c8/0x1f4 [ 3556.484792][T21674] show_stack+0x2c/0x3c [ 3556.485797][T21674] dump_stack_lvl+0x108/0x170 [ 3556.486941][T21674] dump_stack+0x1c/0x5c [ 3556.488007][T21674] should_fail_ex+0x408/0x5d4 [ 3556.489208][T21674] __should_failslab+0xc8/0x128 [ 3556.490340][T21674] should_failslab+0x10/0x28 [ 3556.491390][T21674] kmem_cache_alloc_bulk+0x74/0x4fc [ 3556.492632][T21674] mas_alloc_nodes+0x358/0x704 [ 3556.493735][T21674] mas_preallocate+0x124/0x2dc [ 3556.494833][T21674] __vma_adjust+0x2d4/0x17a8 [ 3556.495907][T21674] __split_vma+0x330/0x4b4 [ 3556.496934][T21674] split_vma+0xa0/0xf8 [ 3556.497947][T21674] mlock_fixup+0x3c4/0x470 [ 3556.499027][T21674] apply_vma_lock_flags+0x2bc/0x3f8 [ 3556.500236][T21674] do_mlock+0x430/0x590 [ 3556.501171][T21674] __arm64_sys_mlock2+0xb4/0xd8 [ 3556.502349][T21674] invoke_syscall+0x98/0x2c0 [ 3556.503388][T21674] el0_svc_common+0x138/0x258 [ 3556.504418][T21674] do_el0_svc+0x64/0x218 [ 3556.505428][T21674] el0_svc+0x58/0x168 [ 3556.506260][T21674] el0t_64_sync_handler+0x84/0xf0 [ 3556.507438][T21674] el0t_64_sync+0x18c/0x190 00:59:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x9, 0x4, 0x3, 0xffffffffffffffc0, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r7, r6}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$team(&(0x7f0000000940), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x80, 0x8, 0x40, 0x7, {{0x25, 0x4, 0x1, 0x8, 0x94, 0x67, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0xb, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @noop, @ssrr={0x89, 0x23, 0x65, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @local, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @noop, @ssrr={0x89, 0x1f, 0xea, [@remote, @broadcast, @multicast1, @broadcast, @empty, @empty, @private=0xa010100]}, @rr={0x7, 0x27, 0xd9, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x9, 0x0, [{0x5, 0x3, '}'}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) (async, rerun: 32) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000011c0)={0x5ec, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa90d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0x20, 0x7, 0xfffeffff}, {0x400, 0x7d, 0x4, 0x7f}, {0x3ff, 0x1, 0xab, 0x3ff}, {0x7f, 0xc4, 0x46, 0xfffffffd}, {0x4, 0x2, 0xb5, 0x6}, {0x9, 0x3f, 0x3a, 0x41b}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x2040}, 0x4040040) (async) socketpair(0x5f587d36d07a3d4d, 0x3, 0x9, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='%%\x00\x00', @ANYRES16=r18, @ANYBLOB="000127bd7000000000000e000000080032000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r17, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r18, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x4040804) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff86) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff86) (async) 00:59:16 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000140)=0x1, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202140a0}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029bd7000fbdbdf2531000000050033000900000008000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="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"/304], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x90) 00:59:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 5) [ 3556.636677][T21703] FAULT_INJECTION: forcing a failure. [ 3556.636677][T21703] name failslab, interval 1, probability 0, space 0, times 0 [ 3556.644085][T21703] CPU: 1 PID: 21703 Comm: syz-executor.1 Not tainted 6.1.29-syzkaller #0 [ 3556.646181][T21703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3556.648619][T21703] Call trace: [ 3556.649304][T21703] dump_backtrace+0x1c8/0x1f4 [ 3556.650403][T21703] show_stack+0x2c/0x3c [ 3556.651444][T21703] dump_stack_lvl+0x108/0x170 [ 3556.652510][T21703] dump_stack+0x1c/0x5c [ 3556.653439][T21703] should_fail_ex+0x408/0x5d4 [ 3556.654490][T21703] __should_failslab+0xc8/0x128 [ 3556.655612][T21703] should_failslab+0x10/0x28 [ 3556.656679][T21703] kmem_cache_alloc+0x8c/0x37c [ 3556.657833][T21703] vm_area_dup+0x30/0x1c8 [ 3556.658854][T21703] __split_vma+0xcc/0x4b4 [ 3556.659821][T21703] split_vma+0xa0/0xf8 [ 3556.660732][T21703] mlock_fixup+0x430/0x470 [ 3556.661732][T21703] apply_vma_lock_flags+0x2bc/0x3f8 [ 3556.662892][T21703] do_mlock+0x430/0x590 [ 3556.663830][T21703] __arm64_sys_mlock2+0xb4/0xd8 [ 3556.664915][T21703] invoke_syscall+0x98/0x2c0 [ 3556.665898][T21703] el0_svc_common+0x138/0x258 [ 3556.666954][T21703] do_el0_svc+0x64/0x218 [ 3556.667861][T21703] el0_svc+0x58/0x168 [ 3556.668738][T21703] el0t_64_sync_handler+0x84/0xf0 [ 3556.669901][T21703] el0t_64_sync+0x18c/0x190 00:59:16 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r16, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:16 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 00:59:16 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7808, 0x7, 0x5, 0xffffffff, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x14, [@private=0xa010102, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x13, 0x1, [{0x1, 0xd, "431931c7382e4eead0d086"}]}, @rr={0x7, 0x17, 0xdf, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0xc, "54410c438102bfd966fb"}, {0x6, 0xc, "9d1908ff64c4b1d5146f"}]}]}}}}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)={0xaf8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8000, 0x40, 0x6, 0x1}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x57}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x7, 0x1f, 0x2}, {0xffff, 0x6, 0x0, 0x8}, {0x8, 0x2, 0x1f, 0xd1a5}, {0x34c, 0x6, 0x5, 0x8380}, {0x5, 0x18, 0x3f, 0xffffffff}, {0xffff, 0x7f, 0x8, 0x403}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3b5b89b0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x20, 0x2, 0x6}, {0xfffd, 0x4, 0x9, 0x2}, {0x0, 0x9, 0x3, 0x1}, {0x7fff, 0x7, 0x3, 0x9}, {0xf23c, 0xff, 0x53}, {0x8, 0x9d, 0x0, 0x5}, {0x9, 0x0, 0x41, 0x400}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x1b8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3c55, 0x3f, 0x2c, 0x200}, {0x0, 0x3, 0x4f, 0x6}, {0x9, 0xea, 0x13, 0x40}, {0x8, 0x15, 0x5, 0x5}, {0x1, 0x2, 0x80, 0x401}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0xaf8}, 0x1, 0x0, 0x0, 0x4040110}, 0x4000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000a, 0x10, r1, 0x10001) 00:59:16 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x206000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x5}) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dri/card#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x84}}, 0x4008094) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf252a000000050036000100000006000400ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 00:59:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff86) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff86) (async) 00:59:16 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 00:59:16 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x44200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x80010, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 00:59:16 executing program 5: mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x180002000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair(0x18, 0x80000, 0x9, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 00:59:16 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x206000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x5}) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dri/card#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x84}}, 0x4008094) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf252a000000050036000100000006000400ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) (async) shmdt(r0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x30, 0xffffffffffffffff, 0x10000000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x206000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x5}) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dri/card#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x84}}, 0x4008094) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf252a000000050036000100000006000400ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async) 00:59:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 6) 00:59:16 executing program 5: mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x180002000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair(0x18, 0x80000, 0x9, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x180002000) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) socketpair(0x18, 0x80000, 0x9, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) 00:59:16 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r16, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:16 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x44200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x80010, r1, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (rerun: 64) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 00:59:16 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 00:59:16 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x30, 0xffffffffffffffff, 0x10000000) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x206000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x5}) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dri/card#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x84}}, 0x4008094) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf252a000000050036000100000006000400ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 00:59:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 7) [ 3556.961350][T21756] FAULT_INJECTION: forcing a failure. [ 3556.961350][T21756] name failslab, interval 1, probability 0, space 0, times 0 00:59:16 executing program 5: mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x180002000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair(0x18, 0x80000, 0x9, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) [ 3556.975092][T21756] CPU: 0 PID: 21756 Comm: syz-executor.1 Not tainted 6.1.29-syzkaller #0 [ 3556.977018][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3556.979387][T21756] Call trace: [ 3556.980220][T21756] dump_backtrace+0x1c8/0x1f4 [ 3556.981347][T21756] show_stack+0x2c/0x3c [ 3556.982396][T21756] dump_stack_lvl+0x108/0x170 [ 3556.983491][T21756] dump_stack+0x1c/0x5c [ 3556.984541][T21756] should_fail_ex+0x408/0x5d4 [ 3556.985632][T21756] __should_failslab+0xc8/0x128 [ 3556.986810][T21756] should_failslab+0x10/0x28 [ 3556.988028][T21756] kmem_cache_alloc+0x8c/0x37c [ 3556.989233][T21756] mas_alloc_nodes+0x228/0x704 [ 3556.990444][T21756] mas_preallocate+0x124/0x2dc [ 3556.991620][T21756] __vma_adjust+0x2d4/0x17a8 [ 3556.992743][T21756] __split_vma+0x330/0x4b4 [ 3556.993875][T21756] split_vma+0xa0/0xf8 [ 3556.994851][T21756] mlock_fixup+0x430/0x470 [ 3556.995992][T21756] apply_vma_lock_flags+0x2bc/0x3f8 [ 3556.997277][T21756] do_mlock+0x430/0x590 [ 3556.998287][T21756] __arm64_sys_mlock2+0xb4/0xd8 [ 3556.999465][T21756] invoke_syscall+0x98/0x2c0 [ 3557.000564][T21756] el0_svc_common+0x138/0x258 [ 3557.001756][T21756] do_el0_svc+0x64/0x218 [ 3557.002811][T21756] el0_svc+0x58/0x168 [ 3557.003786][T21756] el0t_64_sync_handler+0x84/0xf0 [ 3557.005063][T21756] el0t_64_sync+0x18c/0x190 00:59:16 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x44200, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x44200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x80010, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 8) 00:59:17 executing program 3: geteuid() mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) 00:59:17 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:17 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0xf, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) syz_io_uring_setup(0x7e01, &(0x7f0000000000)={0x0, 0xe412, 0x20, 0x3, 0x35e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x18, 0x13, r0, 0x6) 00:59:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x180002000) [ 3557.098380][T21772] FAULT_INJECTION: forcing a failure. [ 3557.098380][T21772] name failslab, interval 1, probability 0, space 0, times 0 [ 3557.101562][T21772] CPU: 1 PID: 21772 Comm: syz-executor.1 Not tainted 6.1.29-syzkaller #0 [ 3557.103589][T21772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3557.106078][T21772] Call trace: [ 3557.106913][T21772] dump_backtrace+0x1c8/0x1f4 [ 3557.108089][T21772] show_stack+0x2c/0x3c [ 3557.109090][T21772] dump_stack_lvl+0x108/0x170 [ 3557.110235][T21772] dump_stack+0x1c/0x5c [ 3557.111335][T21772] should_fail_ex+0x408/0x5d4 [ 3557.112533][T21772] __should_failslab+0xc8/0x128 [ 3557.113767][T21772] should_failslab+0x10/0x28 [ 3557.114919][T21772] kmem_cache_alloc_bulk+0x74/0x4fc [ 3557.116266][T21772] mas_alloc_nodes+0x358/0x704 [ 3557.117415][T21772] mas_preallocate+0x124/0x2dc [ 3557.118588][T21772] __vma_adjust+0x2d4/0x17a8 [ 3557.119732][T21772] __split_vma+0x330/0x4b4 [ 3557.120833][T21772] split_vma+0xa0/0xf8 [ 3557.121818][T21772] mlock_fixup+0x430/0x470 [ 3557.122901][T21772] apply_vma_lock_flags+0x2bc/0x3f8 [ 3557.124226][T21772] do_mlock+0x430/0x590 [ 3557.125309][T21772] __arm64_sys_mlock2+0xb4/0xd8 [ 3557.126494][T21772] invoke_syscall+0x98/0x2c0 [ 3557.127633][T21772] el0_svc_common+0x138/0x258 [ 3557.128828][T21772] do_el0_svc+0x64/0x218 [ 3557.129920][T21772] el0_svc+0x58/0x168 [ 3557.130951][T21772] el0t_64_sync_handler+0x84/0xf0 [ 3557.132145][T21772] el0t_64_sync+0x18c/0x190 00:59:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000540)={r1, r2, 0x0, 0x0, 0x7fff, 0x2, 0x19e, 0x5e12, 0x7, 0x9, 0x2, 0x40}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000580)=0x1, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x101100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000180)=0x10001, &(0x7f00000001c0)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0xffffffffffffff87) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020026bd7000fddbdf2510000000050033000200000005003000010000000500380001000000080034000600000008003286f790fee902c8000000000008003a0001000000060028000300000005"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x15) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="14965d00313cc2d45065b27dd391d65b9f452e5d8b70e2c716ebe31051a9f0af37e26ae40b09bff2e2561b69c86f18ca4b67d891163825ee1033edaa8725d3abb37ad772c1f1bff54b4ca4d898c65a215954f7ba99d262163b5466db47f5614bc0261288cabe3af328c2467f4f07b41faf0c6b4cc8b43a9b9e409e8a9b92373d23a32891eb6d72db2f0c99bacac1bf68b92adfbcb9343dac8e833b012c527bcd695eb4adcf71c4504a38e3e9df4168a99333d847f4292101", @ANYRES16=0x0, @ANYBLOB="38e220722d2319cedf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004815) 00:59:17 executing program 3: geteuid() mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 9) 00:59:17 executing program 3: geteuid() mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) 00:59:17 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0xf, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) syz_io_uring_setup(0x7e01, &(0x7f0000000000)={0x0, 0xe412, 0x20, 0x3, 0x35e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x18, 0x13, r0, 0x6) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0xf, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) (async) syz_io_uring_setup(0x7e01, &(0x7f0000000000)={0x0, 0xe412, 0x20, 0x3, 0x35e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x18, 0x13, r0, 0x6) (async) 00:59:17 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000540)={r1, r2, 0x0, 0x0, 0x7fff, 0x2, 0x19e, 0x5e12, 0x7, 0x9, 0x2, 0x40}) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)) (async) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000580)=0x1, 0x4) (async) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x101100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3}) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) (async) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000180)=0x10001, &(0x7f00000001c0)) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0xffffffffffffff87) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020026bd7000fddbdf2510000000050033000200000005003000010000000500380001000000080034000600000008003286f790fee902c8000000000008003a0001000000060028000300000005"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x15) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="14965d00313cc2d45065b27dd391d65b9f452e5d8b70e2c716ebe31051a9f0af37e26ae40b09bff2e2561b69c86f18ca4b67d891163825ee1033edaa8725d3abb37ad772c1f1bff54b4ca4d898c65a215954f7ba99d262163b5466db47f5614bc0261288cabe3af328c2467f4f07b41faf0c6b4cc8b43a9b9e409e8a9b92373d23a32891eb6d72db2f0c99bacac1bf68b92adfbcb9343dac8e833b012c527bcd695eb4adcf71c4504a38e3e9df4168a99333d847f4292101", @ANYRES16=0x0, @ANYBLOB="38e220722d2319cedf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004815) [ 3557.307433][T21796] FAULT_INJECTION: forcing a failure. [ 3557.307433][T21796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3557.325452][T21796] CPU: 0 PID: 21796 Comm: syz-executor.1 Not tainted 6.1.29-syzkaller #0 [ 3557.327302][T21796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3557.329704][T21796] Call trace: [ 3557.330464][T21796] dump_backtrace+0x1c8/0x1f4 [ 3557.331582][T21796] show_stack+0x2c/0x3c [ 3557.332606][T21796] dump_stack_lvl+0x108/0x170 [ 3557.333644][T21796] dump_stack+0x1c/0x5c [ 3557.334593][T21796] should_fail_ex+0x408/0x5d4 [ 3557.335691][T21796] should_fail+0x14/0x24 [ 3557.336689][T21796] should_fail_usercopy+0x20/0x30 [ 3557.337803][T21796] simple_read_from_buffer+0xd4/0x248 [ 3557.339022][T21796] proc_fail_nth_read+0x198/0x234 [ 3557.340245][T21796] vfs_read+0x280/0x8ac [ 3557.341202][T21796] ksys_read+0x15c/0x26c [ 3557.342112][T21796] __arm64_sys_read+0x7c/0x90 [ 3557.343092][T21796] invoke_syscall+0x98/0x2c0 [ 3557.344262][T21796] el0_svc_common+0x138/0x258 [ 3557.345297][T21796] do_el0_svc+0x64/0x218 [ 3557.346385][T21796] el0_svc+0x58/0x168 [ 3557.347369][T21796] el0t_64_sync_handler+0x84/0xf0 [ 3557.348500][T21796] el0t_64_sync+0x18c/0x190 00:59:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000540)={r1, r2, 0x0, 0x0, 0x7fff, 0x2, 0x19e, 0x5e12, 0x7, 0x9, 0x2, 0x40}) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)) (async) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000580)=0x1, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x101100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) (async) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000180)=0x10001, &(0x7f00000001c0)) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) (async) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0xffffffffffffff87) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020026bd7000fddbdf2510000000050033000200000005003000010000000500380001000000080034000600000008003286f790fee902c8000000000008003a0001000000060028000300000005"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x15) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="14965d00313cc2d45065b27dd391d65b9f452e5d8b70e2c716ebe31051a9f0af37e26ae40b09bff2e2561b69c86f18ca4b67d891163825ee1033edaa8725d3abb37ad772c1f1bff54b4ca4d898c65a215954f7ba99d262163b5466db47f5614bc0261288cabe3af328c2467f4f07b41faf0c6b4cc8b43a9b9e409e8a9b92373d23a32891eb6d72db2f0c99bacac1bf68b92adfbcb9343dac8e833b012c527bcd695eb4adcf71c4504a38e3e9df4168a99333d847f4292101", @ANYRES16=0x0, @ANYBLOB="38e220722d2319cedf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004815) 00:59:17 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0xf, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) (async) syz_io_uring_setup(0x7e01, &(0x7f0000000000)={0x0, 0xe412, 0x20, 0x3, 0x35e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x18, 0x13, r0, 0x6) 00:59:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a04f0cdb51078aa679ff75766d2eaa69fe148f7bb6771648994781be4df61e0657ab7c17c12c326191932400c0fe067eaee0e2ca0a53993c44b730c2827ecd55e5016104554e220761c9249ecad7b4f0a1b1416c", @ANYRES16=r4, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x180002000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x180002000) (async) 00:59:17 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x300, 0x1) 00:59:17 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:59:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r0, &(0x7f0000000100)=""/85, 0x55, 0x100, &(0x7f0000000180)={{0x3, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xffffffffffffffd1) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) 00:59:17 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x500, 0x1) 00:59:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r0, &(0x7f0000000100)=""/85, 0x55, 0x100, &(0x7f0000000180)={{0x3, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xffffffffffffffd1) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) 00:59:17 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:59:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x180002000) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x180002000) 00:59:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a04f0cdb51078aa679ff75766d2eaa69fe148f7bb6771648994781be4df61e0657ab7c17c12c326191932400c0fe067eaee0e2ca0a53993c44b730c2827ecd55e5016104554e220761c9249ecad7b4f0a1b1416c", @ANYRES16=r4, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a04f0cdb51078aa679ff75766d2eaa69fe148f7bb6771648994781be4df61e0657ab7c17c12c326191932400c0fe067eaee0e2ca0a53993c44b730c2827ecd55e5016104554e220761c9249ecad7b4f0a1b1416c", @ANYRES16=r4, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x600, 0x1) 00:59:17 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r0, &(0x7f0000000100)=""/85, 0x55, 0x100, &(0x7f0000000180)={{0x3, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xffffffffffffffd1) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x700, 0x1) 00:59:17 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:59:17 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:59:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a04f0cdb51078aa679ff75766d2eaa69fe148f7bb6771648994781be4df61e0657ab7c17c12c326191932400c0fe067eaee0e2ca0a53993c44b730c2827ecd55e5016104554e220761c9249ecad7b4f0a1b1416c", @ANYRES16=r4, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (rerun: 64) 00:59:17 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x900, 0x1) 00:59:17 executing program 5: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0x11, r0, 0x180002000) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xa00, 0x1) 00:59:18 executing program 5: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0x11, r0, 0x180002000) 00:59:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:59:18 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:18 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 00:59:18 executing program 5: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0x11, r0, 0x180002000) 00:59:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xb00, 0x1) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xc00, 0x1) 00:59:18 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) 00:59:18 executing program 5: socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x5}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x180002000) 00:59:18 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:18 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x700, 0x1) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:18 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xd00, 0x1) 00:59:18 executing program 5: socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x5}) (async, rerun: 64) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x180002000) (rerun: 64) 00:59:18 executing program 3: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:18 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 1) 00:59:18 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xe00, 0x1) 00:59:18 executing program 3: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) (async) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 3558.529327][T21974] FAULT_INJECTION: forcing a failure. [ 3558.529327][T21974] name failslab, interval 1, probability 0, space 0, times 0 [ 3558.532490][T21974] CPU: 0 PID: 21974 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3558.534373][T21974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3558.536724][T21974] Call trace: [ 3558.537475][T21974] dump_backtrace+0x1c8/0x1f4 [ 3558.538510][T21974] show_stack+0x2c/0x3c [ 3558.539451][T21974] dump_stack_lvl+0x108/0x170 [ 3558.540526][T21974] dump_stack+0x1c/0x5c [ 3558.541595][T21974] should_fail_ex+0x408/0x5d4 [ 3558.542740][T21974] __should_failslab+0xc8/0x128 [ 3558.543907][T21974] should_failslab+0x10/0x28 [ 3558.545059][T21974] kmem_cache_alloc+0x8c/0x37c [ 3558.546163][T21974] vm_area_dup+0x30/0x1c8 [ 3558.547176][T21974] __split_vma+0xcc/0x4b4 [ 3558.548228][T21974] split_vma+0xa0/0xf8 [ 3558.549176][T21974] mlock_fixup+0x3c4/0x470 [ 3558.550199][T21974] apply_vma_lock_flags+0x2bc/0x3f8 [ 3558.551402][T21974] do_mlock+0x430/0x590 [ 3558.552325][T21974] __arm64_sys_mlock2+0xb4/0xd8 [ 3558.553571][T21974] invoke_syscall+0x98/0x2c0 [ 3558.554626][T21974] el0_svc_common+0x138/0x258 [ 3558.555684][T21974] do_el0_svc+0x64/0x218 [ 3558.556704][T21974] el0_svc+0x58/0x168 [ 3558.557666][T21974] el0t_64_sync_handler+0x84/0xf0 [ 3558.558866][T21974] el0t_64_sync+0x18c/0x190 00:59:18 executing program 3: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xf00, 0x1) 00:59:18 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 2) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:18 executing program 5: socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x5}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x180002000) socket$xdp(0x2c, 0x3, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x5}) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x180002000) (async) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1002, 0x1) 00:59:18 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:18 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = syz_clone(0xf8802800, &(0x7f0000000000)="32bd7c8e462fa03763528df49e3311b3308d6d5241b5168f9a936f20818a0d218965f24741c3355dfaffdb6d731e4990ab7d241a0d3e67b0a0696bd68398e5d48626ccda43229f7d9cdec054ed2d4d67987f20b5ee933e2ad645a2e90dc24510fe48d95f423a976585a6f2f2bf5b925c32769fe85f93898a5e53f2ab8832f14bb19900472e79885d6a5538fc779edaa345b9d95ed414d25f11847e41158344fb2403d03929a256552925e5c6211dbee6c274306607be122e6cc2ab4ff4c24dbc19a3121014eec6337e6d60605c1fadd81ceb136df6f04dc9a423ad1a8158e8870b6aa55fab2fe1b456d6393e7481fcf8aceab8", 0xffffff09, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="18df1860658482ff4f94c74c1fbb7fca9388d19e89b0af97e7cdf0e0b3fbb37ea5bc487a9dd91b7a225bd80f02ec8406d159640b9ba42791f49b4d8b3147f7da80934d809902a695b42df294c0c9be50d334993ea8d16b369d8b8dd203a13a83c59a79d0692b53e1d5eeb942") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000008ef0ac0e04a4ead10b679d42ace81ec3d967e0bb750ed93c3ef8dca973bc933c1634f11110f1a3b1b7b3e17a84abd0e2f2bb5bec7b31af0f69a4e0a44baa9fb36e866de6f21e5c72d530a8821b7609f26a562b11773aa46ba7e9fbeae3446ecf01ee6bd5d43c7b7a62ed4a3c5ecd38f40e1947823ed173edf6539e68f67d2e3fdeca588d1ad5f1af49582ad5e409b3eecc8a77b48319ae61f8bf84d79391361aed1150ef964bdb68634d87cec0cf63af4c0d6fddb28c85d486920e3b150c9d5e101d94858c4e74acc2afe856a2fcfdd3034e53000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000300000000a0001007770616e340000000500350000000000"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000001) move_pages(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x3, 0x8], &(0x7f0000000280)=[0x0], 0x2) 00:59:18 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 3) 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:18 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) r0 = syz_clone(0xf8802800, &(0x7f0000000000)="32bd7c8e462fa03763528df49e3311b3308d6d5241b5168f9a936f20818a0d218965f24741c3355dfaffdb6d731e4990ab7d241a0d3e67b0a0696bd68398e5d48626ccda43229f7d9cdec054ed2d4d67987f20b5ee933e2ad645a2e90dc24510fe48d95f423a976585a6f2f2bf5b925c32769fe85f93898a5e53f2ab8832f14bb19900472e79885d6a5538fc779edaa345b9d95ed414d25f11847e41158344fb2403d03929a256552925e5c6211dbee6c274306607be122e6cc2ab4ff4c24dbc19a3121014eec6337e6d60605c1fadd81ceb136df6f04dc9a423ad1a8158e8870b6aa55fab2fe1b456d6393e7481fcf8aceab8", 0xffffff09, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="18df1860658482ff4f94c74c1fbb7fca9388d19e89b0af97e7cdf0e0b3fbb37ea5bc487a9dd91b7a225bd80f02ec8406d159640b9ba42791f49b4d8b3147f7da80934d809902a695b42df294c0c9be50d334993ea8d16b369d8b8dd203a13a83c59a79d0692b53e1d5eeb942") (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000008ef0ac0e04a4ead10b679d42ace81ec3d967e0bb750ed93c3ef8dca973bc933c1634f11110f1a3b1b7b3e17a84abd0e2f2bb5bec7b31af0f69a4e0a44baa9fb36e866de6f21e5c72d530a8821b7609f26a562b11773aa46ba7e9fbeae3446ecf01ee6bd5d43c7b7a62ed4a3c5ecd38f40e1947823ed173edf6539e68f67d2e3fdeca588d1ad5f1af49582ad5e409b3eecc8a77b48319ae61f8bf84d79391361aed1150ef964bdb68634d87cec0cf63af4c0d6fddb28c85d486920e3b150c9d5e101d94858c4e74acc2afe856a2fcfdd3034e53000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000300000000a0001007770616e340000000500350000000000"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000001) (async) move_pages(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x3, 0x8], &(0x7f0000000280)=[0x0], 0x2) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1003, 0x1) [ 3558.812794][T22013] FAULT_INJECTION: forcing a failure. [ 3558.812794][T22013] name failslab, interval 1, probability 0, space 0, times 0 [ 3558.841831][T22013] CPU: 0 PID: 22013 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3558.843754][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3558.846095][T22013] Call trace: [ 3558.846789][T22013] dump_backtrace+0x1c8/0x1f4 [ 3558.847772][T22013] show_stack+0x2c/0x3c [ 3558.848807][T22013] dump_stack_lvl+0x108/0x170 [ 3558.849892][T22013] dump_stack+0x1c/0x5c [ 3558.850875][T22013] should_fail_ex+0x408/0x5d4 [ 3558.851991][T22013] __should_failslab+0xc8/0x128 [ 3558.853212][T22013] should_failslab+0x10/0x28 [ 3558.854285][T22013] kmem_cache_alloc+0x8c/0x37c [ 3558.855434][T22013] mas_alloc_nodes+0x228/0x704 [ 3558.856535][T22013] mas_preallocate+0x124/0x2dc [ 3558.857644][T22013] __vma_adjust+0x2d4/0x17a8 [ 3558.858680][T22013] __split_vma+0x330/0x4b4 [ 3558.859652][T22013] split_vma+0xa0/0xf8 [ 3558.860634][T22013] mlock_fixup+0x3c4/0x470 [ 3558.861646][T22013] apply_vma_lock_flags+0x2bc/0x3f8 [ 3558.862908][T22013] do_mlock+0x430/0x590 [ 3558.863885][T22013] __arm64_sys_mlock2+0xb4/0xd8 [ 3558.864978][T22013] invoke_syscall+0x98/0x2c0 [ 3558.866157][T22013] el0_svc_common+0x138/0x258 [ 3558.867296][T22013] do_el0_svc+0x64/0x218 [ 3558.868254][T22013] el0_svc+0x58/0x168 [ 3558.869189][T22013] el0t_64_sync_handler+0x84/0xf0 [ 3558.870374][T22013] el0t_64_sync+0x18c/0x190 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1004, 0x1) 00:59:18 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5962aaa7", @ANYRESHEX=r1, @ANYBLOB="210000000400000000000100000008000100", @ANYRES32=0x0, @ANYRES64], 0x20}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="86f3f0908ff5a11245000785912b5e9beea9f9831943e40168346f6544cedd68b1678c863aaea20bca8730417d6f77971c1c6ef73e19dd6dfac3192efbeacdd887d78d8ad9e1a6b91c"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae5c4cc4acc8808f3318200000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="73797a746e6c310000000000000000005ac1406a2b918088c43f950f6b233d3294b9663fa9ba13ee10a262da26b5f99dd356ab1fdade713eb98b2a574a994dd7", @ANYRES32=0x0, @ANYBLOB="000100a00000000400000001460900d800660000050490787f000001ac1e0001862cffffffff0705a6729a051122174382883b7d322c20e23f1c1e40000c84de67cc388de8f606e506041ad201442c3a1164010102fffffff87f00000100000006e0000001000007feffffffff000001ffe0000002000000c394040100830b630a0101000a0101018913cfe0000002000000000a010101ffffffff4408d38000008001861a0000000301055916f0050f5505bf498a6b11ae9302b91b2c004424f3230a0101008000000100000000000000407f00000100000009ac14143a000000040000"]}) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000bc0)={0x700, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x3f, 0x1, 0x25}, {0x7fff, 0x7, 0x20, 0x101}, {0x20, 0x1, 0x4, 0x7fffffff}, {0x1, 0x7, 0x8, 0x6}, {0x9, 0x7f, 0x3, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x196}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x1, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6b37}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x700}}, 0x10000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) 00:59:18 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:18 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:18 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = syz_clone(0xf8802800, &(0x7f0000000000)="32bd7c8e462fa03763528df49e3311b3308d6d5241b5168f9a936f20818a0d218965f24741c3355dfaffdb6d731e4990ab7d241a0d3e67b0a0696bd68398e5d48626ccda43229f7d9cdec054ed2d4d67987f20b5ee933e2ad645a2e90dc24510fe48d95f423a976585a6f2f2bf5b925c32769fe85f93898a5e53f2ab8832f14bb19900472e79885d6a5538fc779edaa345b9d95ed414d25f11847e41158344fb2403d03929a256552925e5c6211dbee6c274306607be122e6cc2ab4ff4c24dbc19a3121014eec6337e6d60605c1fadd81ceb136df6f04dc9a423ad1a8158e8870b6aa55fab2fe1b456d6393e7481fcf8aceab8", 0xffffff09, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="18df1860658482ff4f94c74c1fbb7fca9388d19e89b0af97e7cdf0e0b3fbb37ea5bc487a9dd91b7a225bd80f02ec8406d159640b9ba42791f49b4d8b3147f7da80934d809902a695b42df294c0c9be50d334993ea8d16b369d8b8dd203a13a83c59a79d0692b53e1d5eeb942") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000008ef0ac0e04a4ead10b679d42ace81ec3d967e0bb750ed93c3ef8dca973bc933c1634f11110f1a3b1b7b3e17a84abd0e2f2bb5bec7b31af0f69a4e0a44baa9fb36e866de6f21e5c72d530a8821b7609f26a562b11773aa46ba7e9fbeae3446ecf01ee6bd5d43c7b7a62ed4a3c5ecd38f40e1947823ed173edf6539e68f67d2e3fdeca588d1ad5f1af49582ad5e409b3eecc8a77b48319ae61f8bf84d79391361aed1150ef964bdb68634d87cec0cf63af4c0d6fddb28c85d486920e3b150c9d5e101d94858c4e74acc2afe856a2fcfdd3034e53000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000300000000a0001007770616e340000000500350000000000"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000001) move_pages(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x3, 0x8], &(0x7f0000000280)=[0x0], 0x2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) syz_clone(0xf8802800, &(0x7f0000000000)="32bd7c8e462fa03763528df49e3311b3308d6d5241b5168f9a936f20818a0d218965f24741c3355dfaffdb6d731e4990ab7d241a0d3e67b0a0696bd68398e5d48626ccda43229f7d9cdec054ed2d4d67987f20b5ee933e2ad645a2e90dc24510fe48d95f423a976585a6f2f2bf5b925c32769fe85f93898a5e53f2ab8832f14bb19900472e79885d6a5538fc779edaa345b9d95ed414d25f11847e41158344fb2403d03929a256552925e5c6211dbee6c274306607be122e6cc2ab4ff4c24dbc19a3121014eec6337e6d60605c1fadd81ceb136df6f04dc9a423ad1a8158e8870b6aa55fab2fe1b456d6393e7481fcf8aceab8", 0xffffff09, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="18df1860658482ff4f94c74c1fbb7fca9388d19e89b0af97e7cdf0e0b3fbb37ea5bc487a9dd91b7a225bd80f02ec8406d159640b9ba42791f49b4d8b3147f7da80934d809902a695b42df294c0c9be50d334993ea8d16b369d8b8dd203a13a83c59a79d0692b53e1d5eeb942") (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000008ef0ac0e04a4ead10b679d42ace81ec3d967e0bb750ed93c3ef8dca973bc933c1634f11110f1a3b1b7b3e17a84abd0e2f2bb5bec7b31af0f69a4e0a44baa9fb36e866de6f21e5c72d530a8821b7609f26a562b11773aa46ba7e9fbeae3446ecf01ee6bd5d43c7b7a62ed4a3c5ecd38f40e1947823ed173edf6539e68f67d2e3fdeca588d1ad5f1af49582ad5e409b3eecc8a77b48319ae61f8bf84d79391361aed1150ef964bdb68634d87cec0cf63af4c0d6fddb28c85d486920e3b150c9d5e101d94858c4e74acc2afe856a2fcfdd3034e53000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000300000000a0001007770616e340000000500350000000000"], 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000001) (async) move_pages(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x3, 0x8], &(0x7f0000000280)=[0x0], 0x2) (async) 00:59:18 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 4) 00:59:18 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1005, 0x1) 00:59:18 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5962aaa7", @ANYRESHEX=r1, @ANYBLOB="210000000400000000000100000008000100", @ANYRES32=0x0, @ANYRES64], 0x20}}, 0x0) (rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="86f3f0908ff5a11245000785912b5e9beea9f9831943e40168346f6544cedd68b1678c863aaea20bca8730417d6f77971c1c6ef73e19dd6dfac3192efbeacdd887d78d8ad9e1a6b91c"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae5c4cc4acc8808f3318200000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="73797a746e6c310000000000000000005ac1406a2b918088c43f950f6b233d3294b9663fa9ba13ee10a262da26b5f99dd356ab1fdade713eb98b2a574a994dd7", @ANYRES32=0x0, @ANYBLOB="000100a00000000400000001460900d800660000050490787f000001ac1e0001862cffffffff0705a6729a051122174382883b7d322c20e23f1c1e40000c84de67cc388de8f606e506041ad201442c3a1164010102fffffff87f00000100000006e0000001000007feffffffff000001ffe0000002000000c394040100830b630a0101000a0101018913cfe0000002000000000a010101ffffffff4408d38000008001861a0000000301055916f0050f5505bf498a6b11ae9302b91b2c004424f3230a0101008000000100000000000000407f00000100000009ac14143a000000040000"]}) (async, rerun: 32) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000bc0)={0x700, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x3f, 0x1, 0x25}, {0x7fff, 0x7, 0x20, 0x101}, {0x20, 0x1, 0x4, 0x7fffffff}, {0x1, 0x7, 0x8, 0x6}, {0x9, 0x7f, 0x3, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x196}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x1, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6b37}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x700}}, 0x10000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x6e22, &(0x7f0000000040)={0x0, 0xee56, 0x2, 0x3, 0xcc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0xfff, 0x240000) r1 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4cef9d6eb90acc72) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) 00:59:19 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 3559.061911][T22054] FAULT_INJECTION: forcing a failure. [ 3559.061911][T22054] name failslab, interval 1, probability 0, space 0, times 0 [ 3559.070764][T22054] CPU: 0 PID: 22054 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3559.072672][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3559.075034][T22054] Call trace: [ 3559.075802][T22054] dump_backtrace+0x1c8/0x1f4 [ 3559.076980][T22054] show_stack+0x2c/0x3c [ 3559.077924][T22054] dump_stack_lvl+0x108/0x170 [ 3559.078989][T22054] dump_stack+0x1c/0x5c [ 3559.079933][T22054] should_fail_ex+0x408/0x5d4 [ 3559.081045][T22054] __should_failslab+0xc8/0x128 [ 3559.082195][T22054] should_failslab+0x10/0x28 [ 3559.083274][T22054] kmem_cache_alloc_bulk+0x74/0x4fc [ 3559.084426][T22054] mas_alloc_nodes+0x358/0x704 [ 3559.085608][T22054] mas_preallocate+0x124/0x2dc [ 3559.086681][T22054] __vma_adjust+0x2d4/0x17a8 [ 3559.087732][T22054] __split_vma+0x330/0x4b4 [ 3559.088750][T22054] split_vma+0xa0/0xf8 [ 3559.089826][T22054] mlock_fixup+0x3c4/0x470 [ 3559.090917][T22054] apply_vma_lock_flags+0x2bc/0x3f8 [ 3559.092160][T22054] do_mlock+0x430/0x590 [ 3559.093169][T22054] __arm64_sys_mlock2+0xb4/0xd8 [ 3559.094372][T22054] invoke_syscall+0x98/0x2c0 [ 3559.095496][T22054] el0_svc_common+0x138/0x258 [ 3559.096582][T22054] do_el0_svc+0x64/0x218 [ 3559.097626][T22054] el0_svc+0x58/0x168 [ 3559.098658][T22054] el0t_64_sync_handler+0x84/0xf0 [ 3559.099710][T22054] el0t_64_sync+0x18c/0x190 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1006, 0x1) 00:59:19 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5962aaa7", @ANYRESHEX=r1, @ANYBLOB="210000000400000000000100000008000100", @ANYRES32=0x0, @ANYRES64], 0x20}}, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="86f3f0908ff5a11245000785912b5e9beea9f9831943e40168346f6544cedd68b1678c863aaea20bca8730417d6f77971c1c6ef73e19dd6dfac3192efbeacdd887d78d8ad9e1a6b91c"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async, rerun: 64) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae5c4cc4acc8808f3318200000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="73797a746e6c310000000000000000005ac1406a2b918088c43f950f6b233d3294b9663fa9ba13ee10a262da26b5f99dd356ab1fdade713eb98b2a574a994dd7", @ANYRES32=0x0, @ANYBLOB="000100a00000000400000001460900d800660000050490787f000001ac1e0001862cffffffff0705a6729a051122174382883b7d322c20e23f1c1e40000c84de67cc388de8f606e506041ad201442c3a1164010102fffffff87f00000100000006e0000001000007feffffffff000001ffe0000002000000c394040100830b630a0101000a0101018913cfe0000002000000000a010101ffffffff4408d38000008001861a0000000301055916f0050f5505bf498a6b11ae9302b91b2c004424f3230a0101008000000100000000000000407f00000100000009ac14143a000000040000"]}) (async) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000bc0)={0x700, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x3f, 0x1, 0x25}, {0x7fff, 0x7, 0x20, 0x101}, {0x20, 0x1, 0x4, 0x7fffffff}, {0x1, 0x7, 0x8, 0x6}, {0x9, 0x7f, 0x3, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x196}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x1, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6b37}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x700}}, 0x10000) (async, rerun: 32) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) (rerun: 32) 00:59:19 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x6e22, &(0x7f0000000040)={0x0, 0xee56, 0x2, 0x3, 0xcc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0xfff, 0x240000) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) (async) r1 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4cef9d6eb90acc72) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) (async) ioctl$SIOCNRDECOBS(r2, 0x89e2) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 5) 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1007, 0x1) 00:59:19 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') [ 3559.239006][T22074] FAULT_INJECTION: forcing a failure. [ 3559.239006][T22074] name failslab, interval 1, probability 0, space 0, times 0 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1008, 0x1) [ 3559.261123][T22074] CPU: 1 PID: 22074 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3559.263114][T22074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3559.265475][T22074] Call trace: [ 3559.266144][T22074] dump_backtrace+0x1c8/0x1f4 [ 3559.267180][T22074] show_stack+0x2c/0x3c [ 3559.268172][T22074] dump_stack_lvl+0x108/0x170 [ 3559.269180][T22074] dump_stack+0x1c/0x5c [ 3559.270099][T22074] should_fail_ex+0x408/0x5d4 [ 3559.271186][T22074] __should_failslab+0xc8/0x128 [ 3559.272275][T22074] should_failslab+0x10/0x28 [ 3559.273386][T22074] kmem_cache_alloc+0x8c/0x37c [ 3559.274497][T22074] vm_area_dup+0x30/0x1c8 [ 3559.275510][T22074] __split_vma+0xcc/0x4b4 [ 3559.276589][T22074] split_vma+0xa0/0xf8 [ 3559.277582][T22074] mlock_fixup+0x430/0x470 [ 3559.278624][T22074] apply_vma_lock_flags+0x2bc/0x3f8 [ 3559.279927][T22074] do_mlock+0x430/0x590 [ 3559.280905][T22074] __arm64_sys_mlock2+0xb4/0xd8 [ 3559.281979][T22074] invoke_syscall+0x98/0x2c0 [ 3559.283057][T22074] el0_svc_common+0x138/0x258 [ 3559.284122][T22074] do_el0_svc+0x64/0x218 [ 3559.285113][T22074] el0_svc+0x58/0x168 [ 3559.286118][T22074] el0t_64_sync_handler+0x84/0xf0 [ 3559.287277][T22074] el0t_64_sync+0x18c/0x190 00:59:19 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x2010, r0, 0x180002000) 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1009, 0x1) 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x6e22, &(0x7f0000000040)={0x0, 0xee56, 0x2, 0x3, 0xcc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0xfff, 0x240000) (async) r1 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4cef9d6eb90acc72) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x2010, r0, 0x180002000) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 6) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 7) [ 3559.413425][T22107] FAULT_INJECTION: forcing a failure. [ 3559.413425][T22107] name failslab, interval 1, probability 0, space 0, times 0 [ 3559.425500][T22107] CPU: 0 PID: 22107 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3559.427299][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3559.429590][T22107] Call trace: [ 3559.430389][T22107] dump_backtrace+0x1c8/0x1f4 [ 3559.431447][T22107] show_stack+0x2c/0x3c [ 3559.432400][T22107] dump_stack_lvl+0x108/0x170 [ 3559.433464][T22107] dump_stack+0x1c/0x5c [ 3559.434497][T22107] should_fail_ex+0x408/0x5d4 [ 3559.435607][T22107] __should_failslab+0xc8/0x128 [ 3559.436820][T22107] should_failslab+0x10/0x28 [ 3559.438040][T22107] kmem_cache_alloc+0x8c/0x37c [ 3559.439205][T22107] mas_alloc_nodes+0x228/0x704 [ 3559.440327][T22107] mas_preallocate+0x124/0x2dc [ 3559.441442][T22107] __vma_adjust+0x2d4/0x17a8 [ 3559.442562][T22107] __split_vma+0x330/0x4b4 [ 3559.443611][T22107] split_vma+0xa0/0xf8 [ 3559.444621][T22107] mlock_fixup+0x430/0x470 [ 3559.445707][T22107] apply_vma_lock_flags+0x2bc/0x3f8 [ 3559.446911][T22107] do_mlock+0x430/0x590 [ 3559.447815][T22107] __arm64_sys_mlock2+0xb4/0xd8 [ 3559.448943][T22107] invoke_syscall+0x98/0x2c0 [ 3559.450133][T22107] el0_svc_common+0x138/0x258 [ 3559.451262][T22107] do_el0_svc+0x64/0x218 [ 3559.452283][T22107] el0_svc+0x58/0x168 [ 3559.453207][T22107] el0t_64_sync_handler+0x84/0xf0 [ 3559.454346][T22107] el0t_64_sync+0x18c/0x190 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100a, 0x1) 00:59:19 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:19 executing program 5: socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x2010, r0, 0x180002000) 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100d, 0x1) 00:59:19 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000040)=[0x1da, 0x1, 0xa1, 0x5], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) syz_open_dev$vim2m(&(0x7f0000000000), 0x49c, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0xa, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008880) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 8) 00:59:19 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async, rerun: 32) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000040)=[0x1da, 0x1, 0xa1, 0x5], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (rerun: 32) [ 3559.546480][T22129] FAULT_INJECTION: forcing a failure. 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r2 = shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) shmdt(r2) [ 3559.546480][T22129] name failslab, interval 1, probability 0, space 0, times 0 [ 3559.549640][T22129] CPU: 1 PID: 22129 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3559.551688][T22129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3559.554008][T22129] Call trace: [ 3559.554797][T22129] dump_backtrace+0x1c8/0x1f4 [ 3559.555854][T22129] show_stack+0x2c/0x3c [ 3559.556804][T22129] dump_stack_lvl+0x108/0x170 [ 3559.558011][T22129] dump_stack+0x1c/0x5c [ 3559.558991][T22129] should_fail_ex+0x408/0x5d4 [ 3559.560085][T22129] __should_failslab+0xc8/0x128 [ 3559.561206][T22129] should_failslab+0x10/0x28 [ 3559.562283][T22129] kmem_cache_alloc_bulk+0x74/0x4fc [ 3559.563487][T22129] mas_alloc_nodes+0x358/0x704 [ 3559.564673][T22129] mas_preallocate+0x124/0x2dc [ 3559.565764][T22129] __vma_adjust+0x2d4/0x17a8 [ 3559.566860][T22129] __split_vma+0x330/0x4b4 [ 3559.567808][T22129] split_vma+0xa0/0xf8 [ 3559.568774][T22129] mlock_fixup+0x430/0x470 [ 3559.569871][T22129] apply_vma_lock_flags+0x2bc/0x3f8 [ 3559.571094][T22129] do_mlock+0x430/0x590 [ 3559.572071][T22129] __arm64_sys_mlock2+0xb4/0xd8 [ 3559.573231][T22129] invoke_syscall+0x98/0x2c0 [ 3559.574278][T22129] el0_svc_common+0x138/0x258 [ 3559.575432][T22129] do_el0_svc+0x64/0x218 [ 3559.576403][T22129] el0_svc+0x58/0x168 [ 3559.577300][T22129] el0t_64_sync_handler+0x84/0xf0 [ 3559.578528][T22129] el0t_64_sync+0x18c/0x190 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100e, 0x1) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x49c, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair(0x1, 0xa, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008880) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (fail_nth: 9) [ 3559.656475][T22142] FAULT_INJECTION: forcing a failure. [ 3559.656475][T22142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3559.670462][T22142] CPU: 1 PID: 22142 Comm: syz-executor.2 Not tainted 6.1.29-syzkaller #0 [ 3559.672508][T22142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3559.674723][T22142] Call trace: [ 3559.675468][T22142] dump_backtrace+0x1c8/0x1f4 [ 3559.676528][T22142] show_stack+0x2c/0x3c [ 3559.677437][T22142] dump_stack_lvl+0x108/0x170 [ 3559.678534][T22142] dump_stack+0x1c/0x5c [ 3559.679503][T22142] should_fail_ex+0x408/0x5d4 [ 3559.680607][T22142] should_fail+0x14/0x24 [ 3559.681626][T22142] should_fail_usercopy+0x20/0x30 [ 3559.682740][T22142] simple_read_from_buffer+0xd4/0x248 [ 3559.684041][T22142] proc_fail_nth_read+0x198/0x234 [ 3559.685278][T22142] vfs_read+0x280/0x8ac [ 3559.686218][T22142] ksys_read+0x15c/0x26c [ 3559.687169][T22142] __arm64_sys_read+0x7c/0x90 [ 3559.688199][T22142] invoke_syscall+0x98/0x2c0 [ 3559.689307][T22142] el0_svc_common+0x138/0x258 [ 3559.690385][T22142] do_el0_svc+0x64/0x218 [ 3559.691250][T22142] el0_svc+0x58/0x168 [ 3559.692117][T22142] el0t_64_sync_handler+0x84/0xf0 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) (async) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) r2 = shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) shmdt(r2) 00:59:19 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') [ 3559.693346][T22142] el0t_64_sync+0x18c/0x190 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100f, 0x1) 00:59:19 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000040)=[0x1da, 0x1, 0xa1, 0x5], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) syz_open_dev$vim2m(&(0x7f0000000000), 0x49c, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0xa, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008880) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x49c, 0x2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair(0x1, 0xa, 0x7fff, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008880) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) (async) 00:59:19 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1010, 0x1) 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r2 = shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) shmdt(r2) 00:59:19 executing program 4: shmat(0x0, &(0x7f00003ff000/0xc00000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x300, 0x1) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x180000000) 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1015, 0x1) 00:59:19 executing program 4: shmat(0x0, &(0x7f00003ff000/0xc00000)=nil, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:19 executing program 3: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) socketpair(0x15, 0x2, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x810, r0, 0x100000000) r1 = syz_io_uring_setup(0x2145, &(0x7f0000000040)={0x0, 0x41bf, 0x2, 0x0, 0x67}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10010, r1, 0x10000000) 00:59:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x180000000) 00:59:19 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:19 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x500, 0x1) 00:59:19 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1021, 0x1) 00:59:19 executing program 4: shmat(0x0, &(0x7f00003ff000/0xc00000)=nil, 0x0) (async) shmat(0x0, &(0x7f00003ff000/0xc00000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:20 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x180000000) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x600, 0x1) 00:59:20 executing program 3: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) socketpair(0x15, 0x2, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x810, r0, 0x100000000) r1 = syz_io_uring_setup(0x2145, &(0x7f0000000040)={0x0, 0x41bf, 0x2, 0x0, 0x67}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10010, r1, 0x10000000) 00:59:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1022, 0x1) 00:59:20 executing program 5: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x700, 0x1) 00:59:20 executing program 3: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) socketpair(0x15, 0x2, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x810, r0, 0x100000000) (async) r1 = syz_io_uring_setup(0x2145, &(0x7f0000000040)={0x0, 0x41bf, 0x2, 0x0, 0x67}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10010, r1, 0x10000000) 00:59:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:20 executing program 5: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1023, 0x1) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x900, 0x1) 00:59:20 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1100, 0x1) 00:59:20 executing program 5: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) (async, rerun: 32) r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) 00:59:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xa00, 0x1) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1f00, 0x1) 00:59:20 executing program 5: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, {0xa, 0x4e20, 0x1, @loopback}, 0xffffffffffffffff, {[0x5, 0x3f, 0x8, 0x2, 0x200, 0x4000, 0x5, 0x3]}}, 0x5c) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x180002000) 00:59:20 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$netrom(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}, 0x48) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={r2, 0x0, 0x0, 0xe982, 0x6, 0xffff, 0xfff, 0x7, 0x5, 0x800, 0xee, 0x3}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x11, r0, 0x10000000) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xb00, 0x1) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x1) 00:59:20 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) 00:59:20 executing program 5: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, {0xa, 0x4e20, 0x1, @loopback}, 0xffffffffffffffff, {[0x5, 0x3f, 0x8, 0x2, 0x200, 0x4000, 0x5, 0x3]}}, 0x5c) (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x180002000) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xc00, 0x1) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x2100, 0x1) 00:59:20 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$netrom(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}, 0x48) (async) bind$netrom(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}, 0x48) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={r2, 0x0, 0x0, 0xe982, 0x6, 0xffff, 0xfff, 0x7, 0x5, 0x800, 0xee, 0x3}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x11, r0, 0x10000000) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x4400, 0x1) 00:59:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$netrom(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}, 0x48) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={r2, 0x0, 0x0, 0xe982, 0x6, 0xffff, 0xfff, 0x7, 0x5, 0x800, 0xee, 0x3}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x11, r0, 0x10000000) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) 00:59:20 executing program 5: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, {0xa, 0x4e20, 0x1, @loopback}, 0xffffffffffffffff, {[0x5, 0x3f, 0x8, 0x2, 0x200, 0x4000, 0x5, 0x3]}}, 0x5c) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x180002000) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xd00, 0x1) 00:59:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) 00:59:20 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xe00, 0x1) 00:59:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 00:59:20 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (rerun: 64) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:59:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}}, 0x40011) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:20 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:20 executing program 4: r0 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff368ad83b2ab474df4691e800d26a0b204b", @ANYRES16=r10, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250f00000008000100", @ANYRES32=r6, @ANYBLOB="0b00140029265dd83e40240008000100", @ANYRES32=r11, @ANYBLOB="0b0014002f242324252a250008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="06001400274000004103795363fcd5ec05d4409cd455313a1e287047c42ef1f3f070d4a02671fcbc7486221c0881ba9213809ad5528fe60cfb2686effdb99876b71a49fdf051559ddc00"/85], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4) 00:59:20 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0xf00, 0x1) 00:59:20 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) 00:59:21 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1002, 0x1) 00:59:21 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1003, 0x1) 00:59:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}}, 0x40011) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}}, 0x40011) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1004, 0x1) 00:59:21 executing program 4: r0 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff368ad83b2ab474df4691e800d26a0b204b", @ANYRES16=r10, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250f00000008000100", @ANYRES32=r6, @ANYBLOB="0b00140029265dd83e40240008000100", @ANYRES32=r11, @ANYBLOB="0b0014002f242324252a250008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="06001400274000004103795363fcd5ec05d4409cd455313a1e287047c42ef1f3f070d4a02671fcbc7486221c0881ba9213809ad5528fe60cfb2686effdb99876b71a49fdf051559ddc00"/85], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4) shmget(0x1, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff368ad83b2ab474df4691e800d26a0b204b", @ANYRES16=r10, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250f00000008000100", @ANYRES32=r6, @ANYBLOB="0b00140029265dd83e40240008000100", @ANYRES32=r11, @ANYBLOB="0b0014002f242324252a250008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="06001400274000004103795363fcd5ec05d4409cd455313a1e287047c42ef1f3f070d4a02671fcbc7486221c0881ba9213809ad5528fe60cfb2686effdb99876b71a49fdf051559ddc00"/85], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4) (async) 00:59:21 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x48}}, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x180002000) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1005, 0x1) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) 00:59:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}}, 0x40011) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:21 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1006, 0x1) 00:59:21 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 00:59:21 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x48}}, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x180002000) socket$xdp(0x2c, 0x3, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x48}}, 0x1) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x180002000) (async) 00:59:21 executing program 4: r0 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff368ad83b2ab474df4691e800d26a0b204b", @ANYRES16=r10, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250f00000008000100", @ANYRES32=r6, @ANYBLOB="0b00140029265dd83e40240008000100", @ANYRES32=r11, @ANYBLOB="0b0014002f242324252a250008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="06001400274000004103795363fcd5ec05d4409cd455313a1e287047c42ef1f3f070d4a02671fcbc7486221c0881ba9213809ad5528fe60cfb2686effdb99876b71a49fdf051559ddc00"/85], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1007, 0x1) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) 00:59:21 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x121800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, r1, 0x0, 0x3f, 0x42, 0xf931, 0x0, 0x3, 0xff, 0x3f, 0x0, 0x2}) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0xf8c0, 0x4, 0x0, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x66, 0x0, 0xa0, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x3, 0xbe}, @ra={0x94, 0x4, 0x8000}, @ssrr={0x89, 0x23, 0x24, [@private=0xa010100, @local, @local, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x23}]}, @end]}}}}}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 00:59:21 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1008, 0x1) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) 00:59:21 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:21 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x121800, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, r1, 0x0, 0x3f, 0x42, 0xf931, 0x0, 0x3, 0xff, 0x3f, 0x0, 0x2}) (async) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0xf8c0, 0x4, 0x0, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x66, 0x0, 0xa0, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x3, 0xbe}, @ra={0x94, 0x4, 0x8000}, @ssrr={0x89, 0x23, 0x24, [@private=0xa010100, @local, @local, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x23}]}, @end]}}}}}) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 00:59:21 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x48}}, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x180002000) socket$xdp(0x2c, 0x3, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x48}}, 0x1) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x180002000) (async) 00:59:21 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (rerun: 64) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1009, 0x1) 00:59:21 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x121800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, r1, 0x0, 0x3f, 0x42, 0xf931, 0x0, 0x3, 0xff, 0x3f, 0x0, 0x2}) (async) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0xf8c0, 0x4, 0x0, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x66, 0x0, 0xa0, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x3, 0xbe}, @ra={0x94, 0x4, 0x8000}, @ssrr={0x89, 0x23, 0x24, [@private=0xa010100, @local, @local, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x23}]}, @end]}}}}}) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 00:59:21 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100a, 0x1) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) 00:59:21 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 3: socketpair(0x2a, 0x1, 0x7d, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r4, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '}}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3755}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) 00:59:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:21 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100d, 0x1) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) 00:59:21 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100e, 0x1) 00:59:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:21 executing program 3: socketpair(0x2a, 0x1, 0x7d, &(0x7f0000000100)) (async) socketpair(0x2a, 0x1, 0x7d, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r4, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r4, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '}}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3755}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) 00:59:21 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='){!#(&\x00') 00:59:21 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x100f, 0x1) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x11) 00:59:21 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) (async) 00:59:21 executing program 3: socketpair(0x2a, 0x1, 0x7d, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r4, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '}}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3755}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) socketpair(0x2a, 0x1, 0x7d, &(0x7f0000000100)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4eb499c", @ANYRES16=r4, @ANYBLOB="100029bd7000fddbdf25020000000c00060000000000000000000c000500d988242fbc42b584080001000000000008000100000000000c0002000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '}}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3755}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) 00:59:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:21 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1010, 0x1) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x21) 00:59:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)='),\x00') 00:59:22 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1015, 0x1) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x22) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)='),\x00') 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1021, 0x1) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)='),\x00') 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1022, 0x1) 00:59:22 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000, 0x10010, 0xffffffffffffffff, 0x0) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) geteuid() mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1023, 0x1) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) geteuid() mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000, 0x10010, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000, 0x10010, 0xffffffffffffffff, 0x0) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000, 0x10010, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000, 0x10010, 0xffffffffffffffff, 0x0) (async) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1100, 0x1) 00:59:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) geteuid() (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1f00, 0x1) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async, rerun: 64) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x1) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x5638, &(0x7f0000000000)={0x0, 0x463, 0x4, 0x3, 0x35}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 00:59:22 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x2100, 0x1) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x5638, &(0x7f0000000000)={0x0, 0x463, 0x4, 0x3, 0x35}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) syz_io_uring_setup(0x5638, &(0x7f0000000000)={0x0, 0x463, 0x4, 0x3, 0x35}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) (async) 00:59:22 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x4400, 0x1) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 00:59:22 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:22 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) 00:59:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x5638, &(0x7f0000000000)={0x0, 0x463, 0x4, 0x3, 0x35}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 00:59:22 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) 00:59:22 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:22 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:22 executing program 3: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x5f, r3, 0x200}, 0xc) recvfrom$netrom(r0, &(0x7f0000000000)=""/242, 0xf2, 0x0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:22 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x33, 0x1, &(0x7f00000001c0)=""/175, 0xaf}, &(0x7f00000002c0)=0x40) 00:59:22 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 00:59:23 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 00:59:23 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 3: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x5f, r3, 0x200}, 0xc) recvfrom$netrom(r0, &(0x7f0000000000)=""/242, 0xf2, 0x0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x5f, r3, 0x200}, 0xc) (async) recvfrom$netrom(r0, &(0x7f0000000000)=""/242, 0xf2, 0x0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) 00:59:23 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x100010, r0, 0x8000000) 00:59:23 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 3: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x5f, r3, 0x200}, 0xc) (async) recvfrom$netrom(r0, &(0x7f0000000000)=""/242, 0xf2, 0x0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) 00:59:23 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x100010, r0, 0x8000000) 00:59:23 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x89, @local, 0x5}, {0xa, 0x4e20, 0x0, @remote, 0x200}, 0xffffffffffffffff, {[0x10000, 0x5, 0xffffffff, 0xbfa5, 0x4, 0x6a0, 0x1, 0x7]}}, 0x5c) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x1000)=nil) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 00:59:23 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x89, @local, 0x5}, {0xa, 0x4e20, 0x0, @remote, 0x200}, 0xffffffffffffffff, {[0x10000, 0x5, 0xffffffff, 0xbfa5, 0x4, 0x6a0, 0x1, 0x7]}}, 0x5c) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x1000)=nil) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x100010, r0, 0x8000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x100010, r0, 0x8000000) (async) 00:59:23 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 00:59:23 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x89, @local, 0x5}, {0xa, 0x4e20, 0x0, @remote, 0x200}, 0xffffffffffffffff, {[0x10000, 0x5, 0xffffffff, 0xbfa5, 0x4, 0x6a0, 0x1, 0x7]}}, 0x5c) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x89, @local, 0x5}, {0xa, 0x4e20, 0x0, @remote, 0x200}, 0xffffffffffffffff, {[0x10000, 0x5, 0xffffffff, 0xbfa5, 0x4, 0x6a0, 0x1, 0x7]}}, 0x5c) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffa000/0x2000)=nil) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f9, &(0x7f0000000540)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x260201, 0x0) syz_io_uring_setup(0x67fe, &(0x7f0000000200)={0x0, 0x7f2b, 0x0, 0x2, 0x220, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmat(r5, &(0x7f0000ff8000/0x2000)=nil, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000010001395df2a6483af50e676c4f29cc1eff4f291b8ef66a20c98f623a0a9ed160e347e25e8caeeabdf6b321912b120f159d1e145f674d33", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf25300000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x1609) 00:59:23 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x2, 0x0, 0xfbfbfbfb}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}}, 0x8081) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffa000/0x2000)=nil) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f9, &(0x7f0000000540)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x260201, 0x0) syz_io_uring_setup(0x67fe, &(0x7f0000000200)={0x0, 0x7f2b, 0x0, 0x2, 0x220, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmat(r5, &(0x7f0000ff8000/0x2000)=nil, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000010001395df2a6483af50e676c4f29cc1eff4f291b8ef66a20c98f623a0a9ed160e347e25e8caeeabdf6b321912b120f159d1e145f674d33", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf25300000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffa000/0x2000)=nil) (async) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f9, &(0x7f0000000540)={'sit0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x260201, 0x0) (async) syz_io_uring_setup(0x67fe, &(0x7f0000000200)={0x0, 0x7f2b, 0x0, 0x2, 0x220, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) (async) shmat(r5, &(0x7f0000ff8000/0x2000)=nil, 0x4000) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000010001395df2a6483af50e676c4f29cc1eff4f291b8ef66a20c98f623a0a9ed160e347e25e8caeeabdf6b321912b120f159d1e145f674d33", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf25300000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) 00:59:23 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x2, 0x0, 0xfbfbfbfb}) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0x80000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}}, 0x8081) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x1609) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) 00:59:23 executing program 0: socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x2, 0x0, 0xfbfbfbfb}) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}}, 0x8081) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) 00:59:23 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (rerun: 32) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x1609) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) userfaultfd(0x0) (async) r0 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffa000/0x2000)=nil) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f9, &(0x7f0000000540)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x260201, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x260201, 0x0) syz_io_uring_setup(0x67fe, &(0x7f0000000200)={0x0, 0x7f2b, 0x0, 0x2, 0x220, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmat(r5, &(0x7f0000ff8000/0x2000)=nil, 0x4000) (async) shmat(r5, &(0x7f0000ff8000/0x2000)=nil, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000010001395df2a6483af50e676c4f29cc1eff4f291b8ef66a20c98f623a0a9ed160e347e25e8caeeabdf6b321912b120f159d1e145f674d33", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf25300000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) socketpair(0x1, 0xa, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) connect$netrom(r0, &(0x7f0000000340)={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000014) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/115, 0x73, 0x1, &(0x7f0000000240)=""/187, 0xbb}, &(0x7f00000001c0)=0x40) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 0: socketpair(0x0, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x11) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:23 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x1010, 0xffffffffffffffff, 0x10000000) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x62bc, &(0x7f0000000180)={0x0, 0xcc7c, 0x1, 0x2, 0x2ba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mlockall(0x3) syz_io_uring_setup(0x6f0d, &(0x7f0000000100)={0x0, 0x0, 0xc6, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)='^\'\x00') 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) socketpair(0x1, 0xa, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) connect$netrom(r0, &(0x7f0000000340)={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000014) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/115, 0x73, 0x1, &(0x7f0000000240)=""/187, 0xbb}, &(0x7f00000001c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/115, 0x73, 0x1, &(0x7f0000000240)=""/187, 0xbb}, &(0x7f00000001c0)=0x40) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) socketpair(0x1, 0xa, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) connect$netrom(r0, &(0x7f0000000340)={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000014) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/115, 0x73, 0x1, &(0x7f0000000240)=""/187, 0xbb}, &(0x7f00000001c0)=0x40) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:23 executing program 0: socketpair(0x0, 0x2, 0x1, &(0x7f00000000c0)) 00:59:23 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x21) 00:59:23 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x1, &(0x7f0000000080)=""/82, 0x52}, &(0x7f0000000140)=0x40) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002dbd7000fedbdf110900000008000300", @ANYRES32=0x0, @ANYBLOB="050035000900000008002c000000000008002b000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff1000/0xf000)=nil) 00:59:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:24 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x9) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x1010, 0xffffffffffffffff, 0x10000000) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x62bc, &(0x7f0000000180)={0x0, 0xcc7c, 0x1, 0x2, 0x2ba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) mlockall(0x3) (async) syz_io_uring_setup(0x6f0d, &(0x7f0000000100)={0x0, 0x0, 0xc6, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)='^\'\x00') 00:59:24 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x22) 00:59:24 executing program 0: socketpair(0x0, 0x2, 0x1, &(0x7f00000000c0)) 00:59:24 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x1, &(0x7f0000000080)=""/82, 0x52}, &(0x7f0000000140)=0x40) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002dbd7000fedbdf110900000008000300", @ANYRES32=0x0, @ANYBLOB="050035000900000008002c000000000008002b000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff1000/0xf000)=nil) 00:59:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:24 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:24 executing program 2: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:24 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:24 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x1, &(0x7f0000000080)=""/82, 0x52}, &(0x7f0000000140)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x1, &(0x7f0000000080)=""/82, 0x52}, &(0x7f0000000140)=0x40) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002dbd7000fedbdf110900000008000300", @ANYRES32=0x0, @ANYBLOB="050035000900000008002c000000000008002b000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff1000/0xf000)=nil) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff1000/0xf000)=nil) 00:59:24 executing program 0: socketpair(0x23, 0x0, 0x1, &(0x7f00000000c0)) 00:59:24 executing program 2: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) (async) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) 00:59:24 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x9) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x1010, 0xffffffffffffffff, 0x10000000) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x62bc, &(0x7f0000000180)={0x0, 0xcc7c, 0x1, 0x2, 0x2ba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mlockall(0x3) (async) mlockall(0x3) syz_io_uring_setup(0x6f0d, &(0x7f0000000100)={0x0, 0x0, 0xc6, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)='^\'\x00') 00:59:24 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x34c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x74, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4e6f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x1a4, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x65d}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5260}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0xf8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xbaf81e637daf4bd8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa1e}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x8801) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x200400c0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x114, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xd8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c288674c7afbc76da121b062ccb6c007c8bb7ed009e6184006532d8ed060b8ca"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x60}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xdd}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "84cc5da2f1f5c6142be336667d882bd3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0c7847099f6c143a2d5a71d33199cd57"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r4, 0x305}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:public_content_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 00:59:24 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:24 executing program 2: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) (async) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) 00:59:24 executing program 0: socketpair(0x23, 0x0, 0x1, &(0x7f00000000c0)) 00:59:24 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200001b, 0x30, r0, 0x0) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) 00:59:24 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:24 executing program 2: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:24 executing program 0: socketpair(0x23, 0x0, 0x1, &(0x7f00000000c0)) 00:59:24 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200001b, 0x30, r0, 0x0) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) (async) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) 00:59:24 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:25 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) 00:59:25 executing program 0: socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200001b, 0x30, r0, 0x0) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) 00:59:25 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 2: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x34c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x74, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4e6f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x1a4, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x65d}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5260}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0xf8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xbaf81e637daf4bd8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa1e}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x8801) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x200400c0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x114, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xd8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c288674c7afbc76da121b062ccb6c007c8bb7ed009e6184006532d8ed060b8ca"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x60}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xdd}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "84cc5da2f1f5c6142be336667d882bd3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0c7847099f6c143a2d5a71d33199cd57"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r4, 0x305}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:public_content_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 00:59:25 executing program 5: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x34c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x74, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4e6f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x1a4, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x65d}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5260}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0xf8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xbaf81e637daf4bd8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa1e}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x8801) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x200400c0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x114, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xd8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c288674c7afbc76da121b062ccb6c007c8bb7ed009e6184006532d8ed060b8ca"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x60}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xdd}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "84cc5da2f1f5c6142be336667d882bd3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0c7847099f6c143a2d5a71d33199cd57"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r4, 0x305}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:public_content_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 00:59:25 executing program 2: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) 00:59:25 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r0, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) (async) 00:59:25 executing program 0: socketpair(0x23, 0x2, 0x0, 0x0) 00:59:25 executing program 5: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3e2, 0x100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 00:59:25 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) (async) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) 00:59:25 executing program 0: socketpair(0x23, 0x2, 0x0, 0x0) 00:59:25 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) 00:59:25 executing program 5: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3e2, 0x100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 00:59:25 executing program 0: socketpair(0x23, 0x2, 0x0, 0x0) 00:59:25 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) 00:59:25 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:25 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 00:59:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3e2, 0x100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x3e2, 0x100) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) 00:59:25 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:25 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="05b67f5717c33f7da9e9ee6dab5300000000000000"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) 00:59:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) 00:59:25 executing program 3: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0x0) 00:59:25 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:25 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="05b67f5717c33f7da9e9ee6dab5300000000000000"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async, rerun: 32) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) (rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) r2 = syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) 00:59:25 executing program 3: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0x0) 00:59:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) 00:59:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) 00:59:25 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="05b67f5717c33f7da9e9ee6dab5300000000000000"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:25 executing program 3: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0x0) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:59:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) 00:59:25 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) (async) 00:59:25 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:25 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:59:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:59:25 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 00:59:25 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:59:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) shmget(0x2, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 00:59:25 executing program 2: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r2, 0x0) 00:59:25 executing program 1: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) 00:59:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x700, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) r7 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) shmdt(r7) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:26 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:59:26 executing program 2: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:26 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 00:59:26 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200800, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xfff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0xb, 0xb, 0x2, 0x100}, @generic={0x4, 0x2, 0x6, 0x7, 0x7cf}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1a}, @ldst={0x1, 0x3, 0x1, 0x7, 0x9, 0x6, 0xfffffffffffffff0}, @generic={0x3, 0x7, 0x5, 0x4, 0x8001}]}, &(0x7f0000000080)='GPL\x00', 0x100, 0x1f, &(0x7f00000000c0)=""/31, 0x41100, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x3ff, 0x7fff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000200)=[r3, 0xffffffffffffffff]}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:26 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_io_uring_setup(0x7907, &(0x7f0000000000)={0x0, 0xdd1e, 0x40, 0x0, 0x1f8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x10000000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x10000000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 00:59:26 executing program 2: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x3927, 0x400, 0x0, 0x31f, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:59:26 executing program 0: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 00:59:26 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200800, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xfff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0xb, 0xb, 0x2, 0x100}, @generic={0x4, 0x2, 0x6, 0x7, 0x7cf}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1a}, @ldst={0x1, 0x3, 0x1, 0x7, 0x9, 0x6, 0xfffffffffffffff0}, @generic={0x3, 0x7, 0x5, 0x4, 0x8001}]}, &(0x7f0000000080)='GPL\x00', 0x100, 0x1f, &(0x7f00000000c0)=""/31, 0x41100, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x3ff, 0x7fff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000200)=[r3, 0xffffffffffffffff]}, 0x80) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) 00:59:26 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_io_uring_setup(0x7907, &(0x7f0000000000)={0x0, 0xdd1e, 0x40, 0x0, 0x1f8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x10000000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x10000000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 00:59:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x700, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) r7 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) shmdt(r7) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x700, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) shmdt(r7) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 00:59:26 executing program 0: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 00:59:26 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200800, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xfff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0xb, 0xb, 0x2, 0x100}, @generic={0x4, 0x2, 0x6, 0x7, 0x7cf}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1a}, @ldst={0x1, 0x3, 0x1, 0x7, 0x9, 0x6, 0xfffffffffffffff0}, @generic={0x3, 0x7, 0x5, 0x4, 0x8001}]}, &(0x7f0000000080)='GPL\x00', 0x100, 0x1f, &(0x7f00000000c0)=""/31, 0x41100, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x3ff, 0x7fff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000200)=[r3, 0xffffffffffffffff]}, 0x80) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:26 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_io_uring_setup(0x7907, &(0x7f0000000000)={0x0, 0xdd1e, 0x40, 0x0, 0x1f8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x10000000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x10000000) (async) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) 00:59:26 executing program 0: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) 00:59:26 executing program 1: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6ddf, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d82000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x4022000, &(0x7f0000000080)="7c234f1b380f3de115fac6407813388dd0656997bac130bc9b99035c8ea84246d88203b0b998fed3f95e26af1351255639d161556aa71462ba26e4c305354f44dfe239fc19e13f832fd4dcd7b5491668023e76674bfab3e19592d3fb0e437791d4765feba9fc62c3693858cf232b3c8b0338d9e0e2291d22582db7a5a6c073def79a9dd902e1c94c377891e5eb007611d331eab08efd52cb80987c778b818ce0ee0325bde761e52d8fcce0d4ec250ec3d476f012326e49a50b1659fd22965d38354e979b300a081e0c7e7b6fe64b7873b45962c7a73d07540e52a6208fc196ab077af4dd3d848e6c45a9fe30bdf1eade", 0xf0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ad40863e42358fe2d727ce761a91b802141a3a0789d46c13dcda625a45deaa188c4c8897c37d6a116d7dc17cfde04ae783c9eaf289c9ffbf38375b4af4a24d423efe3c3b") move_pages(r1, 0x9, &(0x7f0000000280)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000300)=[0x7, 0x2, 0x3, 0x400], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x700, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) r7 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) shmdt(r7) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x700, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) shmdt(r7) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:26 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) (rerun: 32) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:26 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) (async) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:26 executing program 1: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x6ddf, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d82000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r1 = syz_clone(0x4022000, &(0x7f0000000080)="7c234f1b380f3de115fac6407813388dd0656997bac130bc9b99035c8ea84246d88203b0b998fed3f95e26af1351255639d161556aa71462ba26e4c305354f44dfe239fc19e13f832fd4dcd7b5491668023e76674bfab3e19592d3fb0e437791d4765feba9fc62c3693858cf232b3c8b0338d9e0e2291d22582db7a5a6c073def79a9dd902e1c94c377891e5eb007611d331eab08efd52cb80987c778b818ce0ee0325bde761e52d8fcce0d4ec250ec3d476f012326e49a50b1659fd22965d38354e979b300a081e0c7e7b6fe64b7873b45962c7a73d07540e52a6208fc196ab077af4dd3d848e6c45a9fe30bdf1eade", 0xf0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ad40863e42358fe2d727ce761a91b802141a3a0789d46c13dcda625a45deaa188c4c8897c37d6a116d7dc17cfde04ae783c9eaf289c9ffbf38375b4af4a24d423efe3c3b") move_pages(r1, 0x9, &(0x7f0000000280)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000300)=[0x7, 0x2, 0x3, 0x400], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 3: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x18, '\x00', r2, 0x18, r3, 0x8, &(0x7f0000001340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0x3, 0x9, 0xfffff43a}, 0x10, 0x159b7, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff, r4, 0x1, 0x1, 0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) socketpair(0x2b, 0x800, 0x86a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x1, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3, r2, 0xc0c0c0c0}) r3 = accept4$netrom(r0, 0x0, &(0x7f0000000040), 0x800) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x110, r0, 0x80000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x100, 0x200, {{0xe, 0x4, 0x1, 0x3a, 0x38, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@generic={0x83, 0x11, "9fd6c9237d3836a1bae9e15f532198"}, @generic={0x47, 0x11, "96056aa117da6abde54d996f734a5d"}]}}}}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x700, 0x700, 0x400, 0x7, {{0x23, 0x4, 0x3, 0x2, 0x8c, 0x67, 0x0, 0x3b, 0x7b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x1f, 0x8c, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010101, @local]}, @cipso={0x86, 0x56, 0x2, [{0x2, 0xe, "11b57aa25d46259a80d20abf"}, {0x0, 0x10, "3e3eeebbc3cb78869070ffbeab1b"}, {0x2, 0xc, "253a43805d06e9a533f2"}, {0x2, 0xc, "335fdc5f565e68b3d082"}, {0x7, 0xb, "583849ce5eb0524e45"}, {0x1, 0xf, "4b49bfce8a43cccf1bc10b48ad"}]}]}}}}}) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0xa74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7ff, 0x2, 0x8, 0xfffffffb}, {0x1, 0x40, 0x5, 0x80000001}, {0x4, 0xff, 0x9b, 0x2}, {0x80, 0x4, 0x9, 0x4865}, {0x9cf, 0x5, 0x0, 0x3e}, {0x2, 0xff, 0x7, 0x26c000}, {0xa, 0x49, 0xf7, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x118, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x4, 0x94, 0xfff}, {0xff01, 0xff, 0xfc, 0xfd}, {0x3e0, 0x0, 0x1, 0x5}, {0x2, 0x7f, 0x64, 0x2}, {0x3d, 0x40, 0xfc}, {0x8, 0x4, 0xff, 0x3}, {0x7, 0xf7, 0x9, 0x400}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c11628}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x40, 0x4, 0x71, 0x3ff}, {0xfff, 0x4c, 0x8, 0xa049}, {0x5, 0x5, 0x5, 0x4}, {0xc3c6, 0x7f, 0x7f, 0x20}, {0x40, 0x7, 0xbe, 0x3}, {0x8001, 0x0, 0x81, 0x6}, {0x2e3, 0x9, 0x1f, 0x8}, {0x7, 0x1, 0x2, 0x916}, {0x6, 0x1, 0x3, 0xfff}, {0x1, 0x7, 0x0, 0x10000}]}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5ee4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x386}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x1, 0xb, 0x5}, {0x7, 0x7b, 0x0, 0x3f}, {0x7f, 0x0, 0x20, 0x14}, {0x1ff, 0x6, 0x19, 0x3}, {0x4, 0x21, 0x0, 0x7}]}}}]}}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4048801}, 0x5) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) 00:59:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff4000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff4000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) (async, rerun: 64) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) (rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:26 executing program 3: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x18, '\x00', r2, 0x18, r3, 0x8, &(0x7f0000001340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0x3, 0x9, 0xfffff43a}, 0x10, 0x159b7, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff, r4, 0x1, 0x1, 0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) socketpair(0x2b, 0x800, 0x86a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x1, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x18, '\x00', r2, 0x18, r3, 0x8, &(0x7f0000001340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0x3, 0x9, 0xfffff43a}, 0x10, 0x159b7, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff, r4, 0x1, 0x1, 0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) socketpair(0x2b, 0x800, 0x86a, &(0x7f0000000000)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x1, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40) (async) 00:59:26 executing program 1: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6ddf, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d82000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r1 = syz_clone(0x4022000, &(0x7f0000000080)="7c234f1b380f3de115fac6407813388dd0656997bac130bc9b99035c8ea84246d88203b0b998fed3f95e26af1351255639d161556aa71462ba26e4c305354f44dfe239fc19e13f832fd4dcd7b5491668023e76674bfab3e19592d3fb0e437791d4765feba9fc62c3693858cf232b3c8b0338d9e0e2291d22582db7a5a6c073def79a9dd902e1c94c377891e5eb007611d331eab08efd52cb80987c778b818ce0ee0325bde761e52d8fcce0d4ec250ec3d476f012326e49a50b1659fd22965d38354e979b300a081e0c7e7b6fe64b7873b45962c7a73d07540e52a6208fc196ab077af4dd3d848e6c45a9fe30bdf1eade", 0xf0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ad40863e42358fe2d727ce761a91b802141a3a0789d46c13dcda625a45deaa188c4c8897c37d6a116d7dc17cfde04ae783c9eaf289c9ffbf38375b4af4a24d423efe3c3b") move_pages(r1, 0x9, &(0x7f0000000280)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000300)=[0x7, 0x2, 0x3, 0x400], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3, r2, 0xc0c0c0c0}) accept4$netrom(r0, 0x0, &(0x7f0000000040), 0x800) (async) r3 = accept4$netrom(r0, 0x0, &(0x7f0000000040), 0x800) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x110, r0, 0x80000000) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x110, r0, 0x80000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x100, 0x200, {{0xe, 0x4, 0x1, 0x3a, 0x38, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@generic={0x83, 0x11, "9fd6c9237d3836a1bae9e15f532198"}, @generic={0x47, 0x11, "96056aa117da6abde54d996f734a5d"}]}}}}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x700, 0x700, 0x400, 0x7, {{0x23, 0x4, 0x3, 0x2, 0x8c, 0x67, 0x0, 0x3b, 0x7b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x1f, 0x8c, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010101, @local]}, @cipso={0x86, 0x56, 0x2, [{0x2, 0xe, "11b57aa25d46259a80d20abf"}, {0x0, 0x10, "3e3eeebbc3cb78869070ffbeab1b"}, {0x2, 0xc, "253a43805d06e9a533f2"}, {0x2, 0xc, "335fdc5f565e68b3d082"}, {0x7, 0xb, "583849ce5eb0524e45"}, {0x1, 0xf, "4b49bfce8a43cccf1bc10b48ad"}]}]}}}}}) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0xa74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7ff, 0x2, 0x8, 0xfffffffb}, {0x1, 0x40, 0x5, 0x80000001}, {0x4, 0xff, 0x9b, 0x2}, {0x80, 0x4, 0x9, 0x4865}, {0x9cf, 0x5, 0x0, 0x3e}, {0x2, 0xff, 0x7, 0x26c000}, {0xa, 0x49, 0xf7, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x118, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x4, 0x94, 0xfff}, {0xff01, 0xff, 0xfc, 0xfd}, {0x3e0, 0x0, 0x1, 0x5}, {0x2, 0x7f, 0x64, 0x2}, {0x3d, 0x40, 0xfc}, {0x8, 0x4, 0xff, 0x3}, {0x7, 0xf7, 0x9, 0x400}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c11628}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x40, 0x4, 0x71, 0x3ff}, {0xfff, 0x4c, 0x8, 0xa049}, {0x5, 0x5, 0x5, 0x4}, {0xc3c6, 0x7f, 0x7f, 0x20}, {0x40, 0x7, 0xbe, 0x3}, {0x8001, 0x0, 0x81, 0x6}, {0x2e3, 0x9, 0x1f, 0x8}, {0x7, 0x1, 0x2, 0x916}, {0x6, 0x1, 0x3, 0xfff}, {0x1, 0x7, 0x0, 0x10000}]}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5ee4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x386}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x1, 0xb, 0x5}, {0x7, 0x7b, 0x0, 0x3f}, {0x7f, 0x0, 0x20, 0x14}, {0x1ff, 0x6, 0x19, 0x3}, {0x4, 0x21, 0x0, 0x7}]}}}]}}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4048801}, 0x5) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0xa74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7ff, 0x2, 0x8, 0xfffffffb}, {0x1, 0x40, 0x5, 0x80000001}, {0x4, 0xff, 0x9b, 0x2}, {0x80, 0x4, 0x9, 0x4865}, {0x9cf, 0x5, 0x0, 0x3e}, {0x2, 0xff, 0x7, 0x26c000}, {0xa, 0x49, 0xf7, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x118, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x4, 0x94, 0xfff}, {0xff01, 0xff, 0xfc, 0xfd}, {0x3e0, 0x0, 0x1, 0x5}, {0x2, 0x7f, 0x64, 0x2}, {0x3d, 0x40, 0xfc}, {0x8, 0x4, 0xff, 0x3}, {0x7, 0xf7, 0x9, 0x400}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c11628}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x40, 0x4, 0x71, 0x3ff}, {0xfff, 0x4c, 0x8, 0xa049}, {0x5, 0x5, 0x5, 0x4}, {0xc3c6, 0x7f, 0x7f, 0x20}, {0x40, 0x7, 0xbe, 0x3}, {0x8001, 0x0, 0x81, 0x6}, {0x2e3, 0x9, 0x1f, 0x8}, {0x7, 0x1, 0x2, 0x916}, {0x6, 0x1, 0x3, 0xfff}, {0x1, 0x7, 0x0, 0x10000}]}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5ee4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x386}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x1, 0xb, 0x5}, {0x7, 0x7b, 0x0, 0x3f}, {0x7f, 0x0, 0x20, 0x14}, {0x1ff, 0x6, 0x19, 0x3}, {0x4, 0x21, 0x0, 0x7}]}}}]}}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4048801}, 0x5) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) (async) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 3: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x18, '\x00', r2, 0x18, r3, 0x8, &(0x7f0000001340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0x3, 0x9, 0xfffff43a}, 0x10, 0x159b7, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff, r4, 0x1, 0x1, 0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) socketpair(0x2b, 0x800, 0x86a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x1, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3, r2, 0xc0c0c0c0}) (async) r3 = accept4$netrom(r0, 0x0, &(0x7f0000000040), 0x800) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x110, r0, 0x80000000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x100, 0x200, {{0xe, 0x4, 0x1, 0x3a, 0x38, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@generic={0x83, 0x11, "9fd6c9237d3836a1bae9e15f532198"}, @generic={0x47, 0x11, "96056aa117da6abde54d996f734a5d"}]}}}}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x700, 0x700, 0x400, 0x7, {{0x23, 0x4, 0x3, 0x2, 0x8c, 0x67, 0x0, 0x3b, 0x7b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x1f, 0x8c, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010101, @local]}, @cipso={0x86, 0x56, 0x2, [{0x2, 0xe, "11b57aa25d46259a80d20abf"}, {0x0, 0x10, "3e3eeebbc3cb78869070ffbeab1b"}, {0x2, 0xc, "253a43805d06e9a533f2"}, {0x2, 0xc, "335fdc5f565e68b3d082"}, {0x7, 0xb, "583849ce5eb0524e45"}, {0x1, 0xf, "4b49bfce8a43cccf1bc10b48ad"}]}]}}}}}) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0xa74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7ff, 0x2, 0x8, 0xfffffffb}, {0x1, 0x40, 0x5, 0x80000001}, {0x4, 0xff, 0x9b, 0x2}, {0x80, 0x4, 0x9, 0x4865}, {0x9cf, 0x5, 0x0, 0x3e}, {0x2, 0xff, 0x7, 0x26c000}, {0xa, 0x49, 0xf7, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x118, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x4, 0x94, 0xfff}, {0xff01, 0xff, 0xfc, 0xfd}, {0x3e0, 0x0, 0x1, 0x5}, {0x2, 0x7f, 0x64, 0x2}, {0x3d, 0x40, 0xfc}, {0x8, 0x4, 0xff, 0x3}, {0x7, 0xf7, 0x9, 0x400}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c11628}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x40, 0x4, 0x71, 0x3ff}, {0xfff, 0x4c, 0x8, 0xa049}, {0x5, 0x5, 0x5, 0x4}, {0xc3c6, 0x7f, 0x7f, 0x20}, {0x40, 0x7, 0xbe, 0x3}, {0x8001, 0x0, 0x81, 0x6}, {0x2e3, 0x9, 0x1f, 0x8}, {0x7, 0x1, 0x2, 0x916}, {0x6, 0x1, 0x3, 0xfff}, {0x1, 0x7, 0x0, 0x10000}]}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5ee4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x386}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x1, 0xb, 0x5}, {0x7, 0x7b, 0x0, 0x3f}, {0x7f, 0x0, 0x20, 0x14}, {0x1ff, 0x6, 0x19, 0x3}, {0x4, 0x21, 0x0, 0x7}]}}}]}}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4048801}, 0x5) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) 00:59:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff4000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:26 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:26 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 00:59:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 1: setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, {0xa, 0x4e20, 0x0, @mcast2, 0x3ff}, 0x1, {[0x4d08, 0x0, 0xfffffff8, 0x6, 0x7, 0x10000, 0x800, 0x80000001]}}, 0x5c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4011, r0, 0x8000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:27 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000001, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r0, 0x8000000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 00:59:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 1: setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, {0xa, 0x4e20, 0x0, @mcast2, 0x3ff}, 0x1, {[0x4d08, 0x0, 0xfffffff8, 0x6, 0x7, 0x10000, 0x800, 0x80000001]}}, 0x5c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4011, r0, 0x8000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, {0xa, 0x4e20, 0x0, @mcast2, 0x3ff}, 0x1, {[0x4d08, 0x0, 0xfffffff8, 0x6, 0x7, 0x10000, 0x800, 0x80000001]}}, 0x5c) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4011, r0, 0x8000000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000001, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r0, 0x8000000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000001, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r0, 0x8000000) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) 00:59:27 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:27 executing program 1: setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, {0xa, 0x4e20, 0x0, @mcast2, 0x3ff}, 0x1, {[0x4d08, 0x0, 0xfffffff8, 0x6, 0x7, 0x10000, 0x800, 0x80000001]}}, 0x5c) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4011, r0, 0x8000000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 2: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000001, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r0, 0x8000000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 00:59:27 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r0, 0x0) 00:59:27 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) 00:59:27 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 2: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, &(0x7f0000000140)) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 32) munlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) (async, rerun: 32) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r0, 0x0) 00:59:27 executing program 2: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x130010, r0, 0x10000000) 00:59:27 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) munlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) 00:59:27 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 00:59:27 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r0, 0x0) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x130010, r0, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x130010, r0, 0x10000000) 00:59:27 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 00:59:27 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x130010, r0, 0x10000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x130010, r0, 0x10000000) (async) 00:59:27 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:27 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:27 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 64) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:59:27 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) (async) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:59:27 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:27 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r0, 0xc14, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:59:27 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 00:59:27 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r0, 0xc14, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff1000/0xf000)=nil}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(0x0, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 00:59:27 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r0, 0xc14, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 64) 00:59:27 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:27 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:27 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff1000/0xf000)=nil}) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 00:59:27 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(0x0, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x4000010, r0, 0xfffffffffffffa8b) 00:59:28 executing program 1: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff1000/0xf000)=nil}) (async, rerun: 32) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(0x0, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 1: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x4000010, r0, 0xfffffffffffffa8b) 00:59:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) 00:59:28 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)='@*}[\x00') mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x101) 00:59:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) 00:59:28 executing program 1: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)='@*}[\x00') mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x101) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)='@*}[\x00') (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x101) (async) 00:59:28 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x4000010, r0, 0xfffffffffffffa8b) 00:59:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000c90000/0x2000)=nil, 0x2000, 0x4, 0x13, r1, 0x8000000) move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c42000/0x1000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000d48000/0x1000)=nil], &(0x7f0000000040)=[0x7, 0x7], &(0x7f0000000080)=[0x0], 0x4) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)='@*}[\x00') (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x101) 00:59:28 executing program 0: pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:28 executing program 0: pipe2$watch_queue(0x0, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x80000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000c90000/0x2000)=nil, 0x2000, 0x4, 0x13, r1, 0x8000000) (async) move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c42000/0x1000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000d48000/0x1000)=nil], &(0x7f0000000040)=[0x7, 0x7], &(0x7f0000000080)=[0x0], 0x4) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 3: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x10800}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x80000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x80000000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:28 executing program 0: pipe2$watch_queue(0x0, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 1: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 5: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6ddf, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d82000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x4022000, &(0x7f0000000080)="7c234f1b380f3de115fac6407813388dd0656997bac130bc9b99035c8ea84246d88203b0b998fed3f95e26af1351255639d161556aa71462ba26e4c305354f44dfe239fc19e13f832fd4dcd7b5491668023e76674bfab3e19592d3fb0e437791d4765feba9fc62c3693858cf232b3c8b0338d9e0e2291d22582db7a5a6c073def79a9dd902e1c94c377891e5eb007611d331eab08efd52cb80987c778b818ce0ee0325bde761e52d8fcce0d4ec250ec3d476f012326e49a50b1659fd22965d38354e979b300a081e0c7e7b6fe64b7873b45962c7a73d07540e52a6208fc196ab077af4dd3d848e6c45a9fe30bdf1eade", 0xf0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ad40863e42358fe2d727ce761a91b802141a3a0789d46c13dcda625a45deaa188c4c8897c37d6a116d7dc17cfde04ae783c9eaf289c9ffbf38375b4af4a24d423efe3c3b") move_pages(r1, 0x9, &(0x7f0000000280)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000300)=[0x7, 0x2, 0x3, 0x400], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:28 executing program 3: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x10800}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x10800}) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') (async) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x80000000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 0: pipe2$watch_queue(0x0, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 00:59:28 executing program 1: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000c90000/0x2000)=nil, 0x2000, 0x4, 0x13, r1, 0x8000000) (async) move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c42000/0x1000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000d48000/0x1000)=nil], &(0x7f0000000040)=[0x7, 0x7], &(0x7f0000000080)=[0x0], 0x4) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 3: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x10800}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 0: pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8144) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 0: pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) 00:59:28 executing program 1: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) (async, rerun: 32) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0xd, 0x87, 0x9, 0x17, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27, 0x3}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_x_nat_t_type={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x27, 0x10, 0x10}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb6, 0x6, {0x6, 0xcd, 0x81, 0x81, 0x0, 0x9, 0x0, @in=@loopback, @in=@rand_addr=0x64010101}}]}, 0xb8}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x0) (rerun: 64) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 0: pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:28 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0xd, 0x87, 0x9, 0x17, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27, 0x3}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_x_nat_t_type={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x27, 0x10, 0x10}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb6, 0x6, {0x6, 0xcd, 0x81, 0x81, 0x0, 0x9, 0x0, @in=@loopback, @in=@rand_addr=0x64010101}}]}, 0xb8}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) 00:59:28 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) 00:59:28 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/171, 0xab}, &(0x7f0000001100)=0x40) 00:59:28 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:28 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8144) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:28 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x9eeb, &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000006bd6000fcdbdf25280000d3"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) 00:59:29 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0xd, 0x87, 0x9, 0x17, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27, 0x3}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_x_nat_t_type={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x27, 0x10, 0x10}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb6, 0x6, {0x6, 0xcd, 0x81, 0x81, 0x0, 0x9, 0x0, @in=@loopback, @in=@rand_addr=0x64010101}}]}, 0xb8}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0xd, 0x87, 0x9, 0x17, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27, 0x3}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_x_nat_t_type={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x27, 0x10, 0x10}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb6, 0x6, {0x6, 0xcd, 0x81, 0x81, 0x0, 0x9, 0x0, @in=@loopback, @in=@rand_addr=0x64010101}}]}, 0xb8}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/171, 0xab}, &(0x7f0000001100)=0x40) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/171, 0xab}, &(0x7f0000001100)=0x40) (async) 00:59:29 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8144) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)) 00:59:29 executing program 2: mlock2(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x40, 0x6, 0xc6, {{0x13, 0x4, 0x0, 0x33, 0x4c, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x6f, 0x0, 0x6, [0x7f, 0x5, 0x7, 0x8, 0x5]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0x10, "861e34b739302e76d6df1d0fb0ba"}, {0x7, 0x4, "f7d6"}]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x4) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/171, 0xab}, &(0x7f0000001100)=0x40) 00:59:29 executing program 4: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x4, 0x88010, r1, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) io_uring_setup(0x28a8, &(0x7f0000000000)={0x0, 0x6b01, 0x8, 0x0, 0x267, 0x0, r2}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) mmap$dsp(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x30, r3, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 00:59:29 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x40, 0x6, 0xc6, {{0x13, 0x4, 0x0, 0x33, 0x4c, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x6f, 0x0, 0x6, [0x7f, 0x5, 0x7, 0x8, 0x5]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0x10, "861e34b739302e76d6df1d0fb0ba"}, {0x7, 0x4, "f7d6"}]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x4) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x4010, r0, 0x10000000) 00:59:29 executing program 4: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x4, 0x88010, r1, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) io_uring_setup(0x28a8, &(0x7f0000000000)={0x0, 0x6b01, 0x8, 0x0, 0x267, 0x0, r2}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) mmap$dsp(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x30, r3, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) (async) shmget(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) (async) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x4, 0x88010, r1, 0x0) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) io_uring_setup(0x28a8, &(0x7f0000000000)={0x0, 0x6b01, 0x8, 0x0, 0x267, 0x0, r2}) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x30, r3, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:29 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x40, 0x6, 0xc6, {{0x13, 0x4, 0x0, 0x33, 0x4c, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x6f, 0x0, 0x6, [0x7f, 0x5, 0x7, 0x8, 0x5]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0x10, "861e34b739302e76d6df1d0fb0ba"}, {0x7, 0x4, "f7d6"}]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x4) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x4010, r0, 0x10000000) 00:59:29 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) 00:59:29 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 4: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) (async) r0 = shmget(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x4, 0x88010, r1, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) io_uring_setup(0x28a8, &(0x7f0000000000)={0x0, 0x6b01, 0x8, 0x0, 0x267, 0x0, r2}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x30, r3, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x4010, r0, 0x10000000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x4010, r0, 0x10000000) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f0000000040)=""/246, 0xf6}, &(0x7f0000000180)=0x40) 00:59:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x4000000, &(0x7f0000000000)="2515653b69b8cb4805bc4247c02a7ecb12f96757f95c6a636801cdfd24d035d38cb23b6db51503bfcb60872de0766961a6a6f88351051a6d6469b130231b1c32746d8c6892d94d0ac18cb1f04af8ff1c67866fa8768edc3622378e4c7109630af78e1c3fa6f0643a91653599001f6c626fc917db67831b5d42e903665818a97d2ff17211b4523ac759e77879962b3273af01bb0e788080bd6e25bb9bf05a83311c06f8c9788fc1c78f786c86595028cc434895c15e1f0833014aab62358cafa6ce7fd60a3a8a6aea82fbf482c955dd20a3bb4a85ed82cf39e23d24746c7864edbba977cddf88244974004f08e81454d04b20b1", 0xf3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ff371f85c01cfc3085f40dd0bb2a680efa5960e2a9e135c0b3a5cabe6ddd06f1a4902afa2fe0b5813b2e81d8222e0d6afb1872281fd11dbcc4e1fb972c6d627ee94b5ca19121616e506390a8c5256734094f070f8bc630fcfed3b76f34bc5fcaacf09d7b3e63ab49ab826723c214b7dd48829b158eeaf9ff25ac56e947b83d6811a72b30104c18d35cdd99404bbb2564b41d013611f3bd2d3dca6576b877d5fea58a0ec0979b64b115e2c38e01d386aac64531235f19a38fea5cc1e28d12056be0ebd5e105789c7126fcac05043610c8e2c3c9c60fbcede9a0020dce8bc18080add4d96de2287448eab11f652d14d60db1175cc46cb005b1ae87240cfef0f3fc0811cb71ba464278b20ae25dcbd9892615fa3456ef867cb2de8f8deada5adbbea109a42d2f436a9fc0fbc7bdaf8f2ec3b9dd418654258f2a3f08809c5c94abd47a1b79a945d74209b065c646fa6cd52011af277897fae3d718f72cdd7f765805f744043404a5eb51e9f2f9cdd570251795f5f65abe8523d5c77694608a190e1447abea9de38b0fca34f8380824b56d536cd1738bb83e2c8f3cbd843f39cf0c2a7f22816be84217d949703fd2022009af4baf4c9a7288e65cb132494afdaa4a1586fc6768b1ac8aadf2f5544ffeccb9f6cf1b7d3b179f78bbde886c751de09e94e44005b2ca751506931d32fe419d75d3bb742dc1e55cbf9f7b5e6021203c8c578e6e85818008a15f34dfa42b04c86983bdcfa043dd41a093a17e4d2bf38c38a82e49fb7e0251bb0861855e0cc0e49565288c8ba021b20dc07ce19f8308347db193f3bf7eaac892078f2dc42913297434f8c38f79f84ec0575d81b1e7f8568cd4573034e794932b69cb25c8e808e784525f5826ae1639669ef7b3b167aadc61caa8c0ef253b74075f03494fb68f97840a2dbad3096e0148d3ac309064758633569fc87305ac19ac7df2cd664965a003157a87310c31183e16ad01e0748f61ebb69fe92b8afd1dd191df18550c5fb58792982212f652ababaf5949de9b073c34ca9dfb4b8e872f72d59878c9b731424553b1e57617a687a353d1f893ea76169b1a5ec935c55d4a0ed4823eec62f5a7e6539cbf91e59a24978cbcf5c1313d0a344a6f93b0a6bb79b2c78f4d84526203541b6bf80f0b3bf03b5b0b6e53e9cd4165423a02fa6ec896fbf8719c46cd97de422ec8efb82c2fb079408fb33ac21906267c45c4354ac03bc7726140de7cc0817ca2cf8c87236e11450af95810a243e3a5265c048556f181d9269abe7160f7d89f1aa7e946434bcb9e466783e6ab4b3b6cfe25a66319e1b10af83972778ad14ba64505c6410a0090f0c5751faae5bfbda6fb597fbb36b11c6a2809a6ceb5e4b47980ab9644ea1021f399087479df266dc9ce3e82bff6826275e0a8925103517590a19c118604ccb3beae931cb802873d6dc47533505f59be60ecc310cb960b7fc5e7caab64a74d43a7bf06cb89e90c3fbd6d500427429125d18a821045c0fef6000365edcec7453434914ffcc3a2320197395b71aad98051f6ce783e6d9586421420b668c4dfca87357656d2be66092436d09d4e713834d110ae2034de3f8b838ae44be607138b61ce68f1af6cd109f929abebca0a8a752919a78f5764d087d849ceb2e8a4a708ff41560739417995748a330e6767f10cddd32e742badf9d4c06f65c2b5205b68a1096879eb5a6fe15e1ffe7639aed59e2bfabceb3d07b3cd44100653802dd27018bb61dcba0d7891457e21419bbc7f5e1780f6e3572a0877aa77f689118c2ef7ca35211038f7c78985cb2f690f16331d7931b07cf9661da38a53e84ca73f827898d40deda3845af7f73665d1f63561c51fd486d85cd8e89f94d1558f62fb7aed3dd52bd361ac4dfc33c19efeb17b55f7b809cd0919b3f4e57854491ed288516123a4c7c60c29e3ac225d72eaec2e212ad85cb7b44235b30ef077d28f2e330c5dcc5dcca3e1661c49bfcdf977fc8cc28c3d285eb67601ced55e1495a3fbd6467ab0842516e3413111ed1b84d1ac566c3d03f7b3f24d07d858d7a35223c69396a1851d63e1aeeec700fa3db529f7ffe1972f146ba958681bf15d01ef8afe5d1ce6e435f314fbe04b97736a6c0ad9d71f53493e55204d1b04513160260a87df074afd5ee87ac9037643e3a89d9dec2b6ee002c26f9487c3c81230cad1f6aa1916c30e3ea6cf27df26db4986ad6707def19ee3c0ddb4bc58690e7078e1fc15e14683b8b8dcfa513cfe55686310d84f597ddc631d7dbd2564fdc28cd45eaf85b54709b5679ce9c11b3a32523dca7c6f31e20fc21068d891a23463710a281d4e947c64d19863833d2c41f2cc5dc7d7b771c5312f56dfdce9a264124ac332e645c4d2f7c1ce785a7a1834d06d976f064ed55698717ffd638378c774260dd2ec958c20f4727a4d85b1b410fc8ea840a194fec867b1333d97c0ed794a8ade899b300a8a426698051a152a71141a09edba9588d245008bc54b79cb6824e0411c54ae80e01e949f468e61c7b079db656e8d7278ebe51d2bd21327c2d737b3486a52bd489310e96b3c5aeef7a427322f410aa580b842bdca29e3d7daac6aeb4fd92e94da4e0959459d98c135eaae8d92b97db895405e04af9b34255ab3a8cd5fec22647d514712842eb5b5edee838dbc3e6dc6b8d2c13a66e3964fdfbec5863b8972bcf1aa7ae3d0fe0b5dec9a2c99d7db1e53b0599b395870bf5b26cbd6c421ec2ad3315e03065a2a4089369f98d4e9c2e3619bbb8a008ed8910e6ffeac24b6b5418e9f367a3d3945098c6624ead198f8be1ab7b6f950292e90ba64c3007461376fd5a05c95c57dd71ffedc36391783568528f397c86ac44f7c1ce4ffcf28b0ace890dc0383ca26a1a88cabdd553f6513c8aa1bbde415479294963a20881c2e88342108197102800d8102efc2d274687162529fdfc324541494c20ae8022821ba3f68c1679c77b1df24c423711fd4575ab205b32d9748ae65eab3c6861c0fb39c405cc0df3dbcec2964379c9e97516bfdd84dd35d530a8118b6797dff1f4d5eb2e887dc7ce1ffe0360a7575ba084b33a29150ad8f8d3bc184ba64c6fa0ba47bd3f1ff993412531652c1fc597b3439d5f93b84500ec220831850a586f92c6c32994799a9a571f19d789aad49a150eaef33247371aef88ba512d7acc1ca96f4f9b64752971c8891b3ac6cbcfc578f5d3c39eee09bd28beca55ac1c262ef81fc4a699c4afaea5997e31fc99551b46d6798b6fabde7747502c7892521541f03631251a955cb0f305e63cd4348a637ae305dcf1d33ea70cba44018cd6e7b394cb1fd04a26ddce1455c2a6f2abf331f030b15db4fc83a0768273cfc58f02c475261f1ab0833e5d2c2368e3dc7b2643f62817d410eb948a5fd698fff51260fd351dfbbbdba20e1e347bf46db07ad1da5324e8e6957693f1f3aab28c40ee422e0a5582561376b9fb7e9d3d85945ef4e74889d5df88c8640f738c2ee4a771cb001499426f75eb9d59821464f39cd3d930986e8aaa05f006c6adfd8d434c8796b0f278c7362ef161dec91c889b06fc346ed646ed01809f8ac3255e00173079288d31cb04a670c203f9ed8e616e6e3f861fbc46abe2dcb370685ebe76f742e3893fdd9231cd9459af361b2ae47d1168c463ef19c5bd06c600bc4605a8df488a80ca6ab1068cca5be8f8036487c6016a9a5b551d007832c9505a44c0aaba78b0ebe0347b3b8fe6b2ccbbdd18ec9e58903cd8187b775ba5623f0c9e80ac922d301d2ec5c910ab26317d3b9a87e76100140e9e248ba511e0f5a00a4089bd4db9d12951fcd5408ced219d0db96ec8a4d89315642b5fcb2d866eb9836009839c30d0b766a833c3a9e554c667db424ec538214ba4752b491ff44311629a3a25f05b24b3cb257e59b93283c7d4d6ac00edfa93e33745a5b2e04b29da5ab27534c441435be5191df42c118a32cbf856b32c36f610ebd0cf1aa86eb5d2f01bf5cfe678b6af18d67f60306c775dc77778960092178dae4e8c857414db648eced57c01f7dd756dd33eb52a323037d93551407f9b085ff9b04e84957ac40901a6cdba23e22799826b29b3aa3cd27805e3c2f2a743cdcc22b6ae069b3bc52a140bf9918ef06dd23d1e499091e0f213321274bd80c6b7a39801db96127e54e889e5ee896447f7d7a369445bef38cec3b4600330bfe9ad131982be32f58960c213903d3e9e33eb578a9a3a6a8ba0b4cbd5b6d8ed50075714bd9ec017d48589df164e743243d7a91e80c270e724c2026155de8ea7e67b2cff06f00e64ff3fc675bb7f893851dc3cc1ed9cd80bc656f51558f7f00ac923463aa46efefd8ce48589b658174b6aadf1f62585133e8093fc0f650470e95cca41f7377751197620733e0bc504bbd28838d8701705b2a46576ba2dab476082fe3c3c5ba4b03045b9bd036d27457870f8c39581c4c4f4f5678ebde690183c1863684745d9170c905dbd3ad6c45aba359adcfda9c4f87baaf4db0b453ef076a2f7b4d1c156d406a767f1be5947bb43f60b47821e591868506e675cebee7da49adee2433cb069bc9eb8991918751acda960c59d4794be3e19b8461caf3c7ccb972e60c37ff611861ffdefc16a56536b1a902475ea76af6b4e1602b5699e25e54267e637430c6782d82a620ca1ef9bcc61b7948efbec309b4210ccd43f2a383e00e4e1a0ed4d67f58235008885527b8c4b99eaace2e82298e2e1aaed64f8a6dc838bf9a67b50de2322d3b56e999f3a7144817e1d1cb5d11a5bf9f84804a7d5f2a6767b702e25c9e5fdde4fd17ca2d01bb1d65a115579a8dc41dffc88fbc3ea71af7709bf7650df7d53ab4a7ed9ec500ea4df02711db539477907bb84b24f5a6b5c5d187b3c365a6c90765959ca1aab027e707d22a4f00bfe38e7afcaf3ba882aef0e5b41326cddbdd324677903a9a89186c26864be566413f961209efcdb77b211673cf853e59b5969eee25a28a8ce0bcbf500add1c996a377020121d3df13d421c243bc87c60cb1e992fe8cab48279a2d3a4f99a0876846cb96ee166cb5104bb60edabe11aa1f3614a2e2e0646c58c661fc4c7c3b27a7f3a64700e63f6e4fdb93a2be983ba300072e7cb0c12be93aeab42caa7a68ec37f2e525350b4d283710fc7180850d2b2ad04a127fa3b79dd027cee338590cf631904cf2f398c96cbd993ef800fe80547725b0c759a2d1030f451fa17d2f34898f60015fbaaf835ac5bcc8e6c649f87edebf77ec35b749c6fb3cf39525989231e8fed2173086f5018b2df0aabcc8d7552051b7e5eb0cf239230913b2a3dd060751c31551e25e191be5b104ff09be4dc562f471b6ac07635795bd4cee54e6bd5c61464e34ea3789291f60f370d6c1f4a5c03e1b68c06a699f2309ef79545205902e6d1050ffda7b18fcc2690f8d7c4a1a43f6ff54aff69b8772c9bc8bac1252dfe838fe6acf921ce137eff4d2bfcc725cbdc7e196086b3c92c95a7bb818991edb1e4e2d31322a5f51de8d52aa63ed76c06f001d5721e6fae8f498d890f08c613db66cf116e6aeddffdbe11ca094159674ebb3d55d7b88eb44f909332994f3e6b2fd6a076bb4ce9b77df92d10947e87012bca233c6ce443ebdcc0a4e46f3e2ffc9892aa970244a5f1fb9a1a36f0553ce6c17e6dd11e8ad39c52d4d045acc124270317221a47ed6c0dcaad2701d721a2de584b57e5fd0bc3a791a8a9007602773771cdbfc2d3b6e46bdb2f20a6559811d07c8f1bca79ea452342b9de160a37bc200a3f915cb33b424e1ba12183aba86bed35e01818") move_pages(r0, 0x6, &(0x7f0000001180)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001240)=[0x2, 0x4, 0x9, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5], &(0x7f0000001200)=[0x0, 0x0], 0x0) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x4010, r0, 0x10000000) 00:59:29 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000010f6ff0000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x2, 0x35, 0xb}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1]}, 0x80) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$netrom(r3, &(0x7f0000000240)={{0x3, @default, 0x2}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) 00:59:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) (async) r0 = syz_clone(0x4000000, &(0x7f0000000000)="2515653b69b8cb4805bc4247c02a7ecb12f96757f95c6a636801cdfd24d035d38cb23b6db51503bfcb60872de0766961a6a6f88351051a6d6469b130231b1c32746d8c6892d94d0ac18cb1f04af8ff1c67866fa8768edc3622378e4c7109630af78e1c3fa6f0643a91653599001f6c626fc917db67831b5d42e903665818a97d2ff17211b4523ac759e77879962b3273af01bb0e788080bd6e25bb9bf05a83311c06f8c9788fc1c78f786c86595028cc434895c15e1f0833014aab62358cafa6ce7fd60a3a8a6aea82fbf482c955dd20a3bb4a85ed82cf39e23d24746c7864edbba977cddf88244974004f08e81454d04b20b1", 0xf3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ff371f85c01cfc3085f40dd0bb2a680efa5960e2a9e135c0b3a5cabe6ddd06f1a4902afa2fe0b5813b2e81d8222e0d6afb1872281fd11dbcc4e1fb972c6d627ee94b5ca19121616e506390a8c5256734094f070f8bc630fcfed3b76f34bc5fcaacf09d7b3e63ab49ab826723c214b7dd48829b158eeaf9ff25ac56e947b83d6811a72b30104c18d35cdd99404bbb2564b41d013611f3bd2d3dca6576b877d5fea58a0ec0979b64b115e2c38e01d386aac64531235f19a38fea5cc1e28d12056be0ebd5e105789c7126fcac05043610c8e2c3c9c60fbcede9a0020dce8bc18080add4d96de2287448eab11f652d14d60db1175cc46cb005b1ae87240cfef0f3fc0811cb71ba464278b20ae25dcbd9892615fa3456ef867cb2de8f8deada5adbbea109a42d2f436a9fc0fbc7bdaf8f2ec3b9dd418654258f2a3f08809c5c94abd47a1b79a945d74209b065c646fa6cd52011af277897fae3d718f72cdd7f765805f744043404a5eb51e9f2f9cdd570251795f5f65abe8523d5c77694608a190e1447abea9de38b0fca34f8380824b56d536cd1738bb83e2c8f3cbd843f39cf0c2a7f22816be84217d949703fd2022009af4baf4c9a7288e65cb132494afdaa4a1586fc6768b1ac8aadf2f5544ffeccb9f6cf1b7d3b179f78bbde886c751de09e94e44005b2ca751506931d32fe419d75d3bb742dc1e55cbf9f7b5e6021203c8c578e6e85818008a15f34dfa42b04c86983bdcfa043dd41a093a17e4d2bf38c38a82e49fb7e0251bb0861855e0cc0e49565288c8ba021b20dc07ce19f8308347db193f3bf7eaac892078f2dc42913297434f8c38f79f84ec0575d81b1e7f8568cd4573034e794932b69cb25c8e808e784525f5826ae1639669ef7b3b167aadc61caa8c0ef253b74075f03494fb68f97840a2dbad3096e0148d3ac309064758633569fc87305ac19ac7df2cd664965a003157a87310c31183e16ad01e0748f61ebb69fe92b8afd1dd191df18550c5fb58792982212f652ababaf5949de9b073c34ca9dfb4b8e872f72d59878c9b731424553b1e57617a687a353d1f893ea76169b1a5ec935c55d4a0ed4823eec62f5a7e6539cbf91e59a24978cbcf5c1313d0a344a6f93b0a6bb79b2c78f4d84526203541b6bf80f0b3bf03b5b0b6e53e9cd4165423a02fa6ec896fbf8719c46cd97de422ec8efb82c2fb079408fb33ac21906267c45c4354ac03bc7726140de7cc0817ca2cf8c87236e11450af95810a243e3a5265c048556f181d9269abe7160f7d89f1aa7e946434bcb9e466783e6ab4b3b6cfe25a66319e1b10af83972778ad14ba64505c6410a0090f0c5751faae5bfbda6fb597fbb36b11c6a2809a6ceb5e4b47980ab9644ea1021f399087479df266dc9ce3e82bff6826275e0a8925103517590a19c118604ccb3beae931cb802873d6dc47533505f59be60ecc310cb960b7fc5e7caab64a74d43a7bf06cb89e90c3fbd6d500427429125d18a821045c0fef6000365edcec7453434914ffcc3a2320197395b71aad98051f6ce783e6d9586421420b668c4dfca87357656d2be66092436d09d4e713834d110ae2034de3f8b838ae44be607138b61ce68f1af6cd109f929abebca0a8a752919a78f5764d087d849ceb2e8a4a708ff41560739417995748a330e6767f10cddd32e742badf9d4c06f65c2b5205b68a1096879eb5a6fe15e1ffe7639aed59e2bfabceb3d07b3cd44100653802dd27018bb61dcba0d7891457e21419bbc7f5e1780f6e3572a0877aa77f689118c2ef7ca35211038f7c78985cb2f690f16331d7931b07cf9661da38a53e84ca73f827898d40deda3845af7f73665d1f63561c51fd486d85cd8e89f94d1558f62fb7aed3dd52bd361ac4dfc33c19efeb17b55f7b809cd0919b3f4e57854491ed288516123a4c7c60c29e3ac225d72eaec2e212ad85cb7b44235b30ef077d28f2e330c5dcc5dcca3e1661c49bfcdf977fc8cc28c3d285eb67601ced55e1495a3fbd6467ab0842516e3413111ed1b84d1ac566c3d03f7b3f24d07d858d7a35223c69396a1851d63e1aeeec700fa3db529f7ffe1972f146ba958681bf15d01ef8afe5d1ce6e435f314fbe04b97736a6c0ad9d71f53493e55204d1b04513160260a87df074afd5ee87ac9037643e3a89d9dec2b6ee002c26f9487c3c81230cad1f6aa1916c30e3ea6cf27df26db4986ad6707def19ee3c0ddb4bc58690e7078e1fc15e14683b8b8dcfa513cfe55686310d84f597ddc631d7dbd2564fdc28cd45eaf85b54709b5679ce9c11b3a32523dca7c6f31e20fc21068d891a23463710a281d4e947c64d19863833d2c41f2cc5dc7d7b771c5312f56dfdce9a264124ac332e645c4d2f7c1ce785a7a1834d06d976f064ed55698717ffd638378c774260dd2ec958c20f4727a4d85b1b410fc8ea840a194fec867b1333d97c0ed794a8ade899b300a8a426698051a152a71141a09edba9588d245008bc54b79cb6824e0411c54ae80e01e949f468e61c7b079db656e8d7278ebe51d2bd21327c2d737b3486a52bd489310e96b3c5aeef7a427322f410aa580b842bdca29e3d7daac6aeb4fd92e94da4e0959459d98c135eaae8d92b97db895405e04af9b34255ab3a8cd5fec22647d514712842eb5b5edee838dbc3e6dc6b8d2c13a66e3964fdfbec5863b8972bcf1aa7ae3d0fe0b5dec9a2c99d7db1e53b0599b395870bf5b26cbd6c421ec2ad3315e03065a2a4089369f98d4e9c2e3619bbb8a008ed8910e6ffeac24b6b5418e9f367a3d3945098c6624ead198f8be1ab7b6f950292e90ba64c3007461376fd5a05c95c57dd71ffedc36391783568528f397c86ac44f7c1ce4ffcf28b0ace890dc0383ca26a1a88cabdd553f6513c8aa1bbde415479294963a20881c2e88342108197102800d8102efc2d274687162529fdfc324541494c20ae8022821ba3f68c1679c77b1df24c423711fd4575ab205b32d9748ae65eab3c6861c0fb39c405cc0df3dbcec2964379c9e97516bfdd84dd35d530a8118b6797dff1f4d5eb2e887dc7ce1ffe0360a7575ba084b33a29150ad8f8d3bc184ba64c6fa0ba47bd3f1ff993412531652c1fc597b3439d5f93b84500ec220831850a586f92c6c32994799a9a571f19d789aad49a150eaef33247371aef88ba512d7acc1ca96f4f9b64752971c8891b3ac6cbcfc578f5d3c39eee09bd28beca55ac1c262ef81fc4a699c4afaea5997e31fc99551b46d6798b6fabde7747502c7892521541f03631251a955cb0f305e63cd4348a637ae305dcf1d33ea70cba44018cd6e7b394cb1fd04a26ddce1455c2a6f2abf331f030b15db4fc83a0768273cfc58f02c475261f1ab0833e5d2c2368e3dc7b2643f62817d410eb948a5fd698fff51260fd351dfbbbdba20e1e347bf46db07ad1da5324e8e6957693f1f3aab28c40ee422e0a5582561376b9fb7e9d3d85945ef4e74889d5df88c8640f738c2ee4a771cb001499426f75eb9d59821464f39cd3d930986e8aaa05f006c6adfd8d434c8796b0f278c7362ef161dec91c889b06fc346ed646ed01809f8ac3255e00173079288d31cb04a670c203f9ed8e616e6e3f861fbc46abe2dcb370685ebe76f742e3893fdd9231cd9459af361b2ae47d1168c463ef19c5bd06c600bc4605a8df488a80ca6ab1068cca5be8f8036487c6016a9a5b551d007832c9505a44c0aaba78b0ebe0347b3b8fe6b2ccbbdd18ec9e58903cd8187b775ba5623f0c9e80ac922d301d2ec5c910ab26317d3b9a87e76100140e9e248ba511e0f5a00a4089bd4db9d12951fcd5408ced219d0db96ec8a4d89315642b5fcb2d866eb9836009839c30d0b766a833c3a9e554c667db424ec538214ba4752b491ff44311629a3a25f05b24b3cb257e59b93283c7d4d6ac00edfa93e33745a5b2e04b29da5ab27534c441435be5191df42c118a32cbf856b32c36f610ebd0cf1aa86eb5d2f01bf5cfe678b6af18d67f60306c775dc77778960092178dae4e8c857414db648eced57c01f7dd756dd33eb52a323037d93551407f9b085ff9b04e84957ac40901a6cdba23e22799826b29b3aa3cd27805e3c2f2a743cdcc22b6ae069b3bc52a140bf9918ef06dd23d1e499091e0f213321274bd80c6b7a39801db96127e54e889e5ee896447f7d7a369445bef38cec3b4600330bfe9ad131982be32f58960c213903d3e9e33eb578a9a3a6a8ba0b4cbd5b6d8ed50075714bd9ec017d48589df164e743243d7a91e80c270e724c2026155de8ea7e67b2cff06f00e64ff3fc675bb7f893851dc3cc1ed9cd80bc656f51558f7f00ac923463aa46efefd8ce48589b658174b6aadf1f62585133e8093fc0f650470e95cca41f7377751197620733e0bc504bbd28838d8701705b2a46576ba2dab476082fe3c3c5ba4b03045b9bd036d27457870f8c39581c4c4f4f5678ebde690183c1863684745d9170c905dbd3ad6c45aba359adcfda9c4f87baaf4db0b453ef076a2f7b4d1c156d406a767f1be5947bb43f60b47821e591868506e675cebee7da49adee2433cb069bc9eb8991918751acda960c59d4794be3e19b8461caf3c7ccb972e60c37ff611861ffdefc16a56536b1a902475ea76af6b4e1602b5699e25e54267e637430c6782d82a620ca1ef9bcc61b7948efbec309b4210ccd43f2a383e00e4e1a0ed4d67f58235008885527b8c4b99eaace2e82298e2e1aaed64f8a6dc838bf9a67b50de2322d3b56e999f3a7144817e1d1cb5d11a5bf9f84804a7d5f2a6767b702e25c9e5fdde4fd17ca2d01bb1d65a115579a8dc41dffc88fbc3ea71af7709bf7650df7d53ab4a7ed9ec500ea4df02711db539477907bb84b24f5a6b5c5d187b3c365a6c90765959ca1aab027e707d22a4f00bfe38e7afcaf3ba882aef0e5b41326cddbdd324677903a9a89186c26864be566413f961209efcdb77b211673cf853e59b5969eee25a28a8ce0bcbf500add1c996a377020121d3df13d421c243bc87c60cb1e992fe8cab48279a2d3a4f99a0876846cb96ee166cb5104bb60edabe11aa1f3614a2e2e0646c58c661fc4c7c3b27a7f3a64700e63f6e4fdb93a2be983ba300072e7cb0c12be93aeab42caa7a68ec37f2e525350b4d283710fc7180850d2b2ad04a127fa3b79dd027cee338590cf631904cf2f398c96cbd993ef800fe80547725b0c759a2d1030f451fa17d2f34898f60015fbaaf835ac5bcc8e6c649f87edebf77ec35b749c6fb3cf39525989231e8fed2173086f5018b2df0aabcc8d7552051b7e5eb0cf239230913b2a3dd060751c31551e25e191be5b104ff09be4dc562f471b6ac07635795bd4cee54e6bd5c61464e34ea3789291f60f370d6c1f4a5c03e1b68c06a699f2309ef79545205902e6d1050ffda7b18fcc2690f8d7c4a1a43f6ff54aff69b8772c9bc8bac1252dfe838fe6acf921ce137eff4d2bfcc725cbdc7e196086b3c92c95a7bb818991edb1e4e2d31322a5f51de8d52aa63ed76c06f001d5721e6fae8f498d890f08c613db66cf116e6aeddffdbe11ca094159674ebb3d55d7b88eb44f909332994f3e6b2fd6a076bb4ce9b77df92d10947e87012bca233c6ce443ebdcc0a4e46f3e2ffc9892aa970244a5f1fb9a1a36f0553ce6c17e6dd11e8ad39c52d4d045acc124270317221a47ed6c0dcaad2701d721a2de584b57e5fd0bc3a791a8a9007602773771cdbfc2d3b6e46bdb2f20a6559811d07c8f1bca79ea452342b9de160a37bc200a3f915cb33b424e1ba12183aba86bed35e01818") move_pages(r0, 0x6, &(0x7f0000001180)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001240)=[0x2, 0x4, 0x9, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5], &(0x7f0000001200)=[0x0, 0x0], 0x0) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f0000000040)=""/246, 0xf6}, &(0x7f0000000180)=0x40) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f0000000040)=""/246, 0xf6}, &(0x7f0000000180)=0x40) (async) 00:59:29 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000010f6ff0000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x2, 0x35, 0xb}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1]}, 0x80) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async, rerun: 64) bind$netrom(r3, &(0x7f0000000240)={{0x3, @default, 0x2}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x4010, r0, 0x10000000) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f0000000040)=""/246, 0xf6}, &(0x7f0000000180)=0x40) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f0000000040)=""/246, 0xf6}, &(0x7f0000000180)=0x40) (async) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:59:29 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000010f6ff0000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x2, 0x35, 0xb}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1]}, 0x80) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$netrom(r3, &(0x7f0000000240)={{0x3, @default, 0x2}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) bind$netrom(r3, &(0x7f0000000240)={{0x3, @default, 0x2}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) (async) r0 = syz_clone(0x4000000, &(0x7f0000000000)="2515653b69b8cb4805bc4247c02a7ecb12f96757f95c6a636801cdfd24d035d38cb23b6db51503bfcb60872de0766961a6a6f88351051a6d6469b130231b1c32746d8c6892d94d0ac18cb1f04af8ff1c67866fa8768edc3622378e4c7109630af78e1c3fa6f0643a91653599001f6c626fc917db67831b5d42e903665818a97d2ff17211b4523ac759e77879962b3273af01bb0e788080bd6e25bb9bf05a83311c06f8c9788fc1c78f786c86595028cc434895c15e1f0833014aab62358cafa6ce7fd60a3a8a6aea82fbf482c955dd20a3bb4a85ed82cf39e23d24746c7864edbba977cddf88244974004f08e81454d04b20b1", 0xf3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") move_pages(r0, 0x6, &(0x7f0000001180)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001240)=[0x2, 0x4, 0x9, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5], &(0x7f0000001200)=[0x0, 0x0], 0x0) 00:59:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:59:29 executing program 0: shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 4: r0 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x100b, &(0x7f0000000040)={0x0, 0xd063, 0x0, 0x3, 0xff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x13, r0, 0x10000000) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x13, 0xffffffffffffffff, 0x10000000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x612cf3e6) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:29 executing program 4: r0 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) (async) syz_io_uring_setup(0x100b, &(0x7f0000000040)={0x0, 0xd063, 0x0, 0x3, 0xff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:29 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') (async) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x13, 0xffffffffffffffff, 0x10000000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x612cf3e6) 00:59:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') 00:59:29 executing program 4: r0 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) (async) syz_io_uring_setup(0x100b, &(0x7f0000000040)={0x0, 0xd063, 0x0, 0x3, 0xff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000004, 0x10, 0xffffffffffffffff, 0x200) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000200)=[0xfffffffc, 0x8b, 0x0, 0xfff, 0x81], &(0x7f0000000240)=[0x0], 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400), 0x2400) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x328bf73655a6ff3d, 0x0, &(0x7f0000000040)=""/157, 0x9d}, &(0x7f0000000140)=0xfffffcbb) sendto$netrom(r0, &(0x7f0000000280)="fa7f3f38538269f83fb16294f619a5279e7fc2bd8352b24bb7bd97e180edc1fd9429c734ed7c5942606a6890018fb15a1ea7df95d615b85f6e2cde6870fa56ac116f2985c19cc32eb4fa15cc7acd0bcf5ec6edf1ea3aae8d32b3af454f458ec49743e8c7c7344dbc8c40449e9299bfe4ecea75f754fc11f50a4f2e760ebf87445f767914540cbe9d0c5f967179b78f24fd6324f647d917c21b464036c8c731d7cc883975074085e649b821a56b4ee12500bcc37dd8ae0beca26563ad3fc41ecd138ca8d8f71adc489cd60b179ec1a390a07caf3cd189a07251a001200e954ebf465fa33cd25e05f4a1620ae5dd574d0a71db13200826a02539bb0cb7", 0xfc, 0x24000893, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:59:30 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x5) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x13, 0xffffffffffffffff, 0x10000000) (async, rerun: 32) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x612cf3e6) 00:59:30 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000004, 0x10, 0xffffffffffffffff, 0x200) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000200)=[0xfffffffc, 0x8b, 0x0, 0xfff, 0x81], &(0x7f0000000240)=[0x0], 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400), 0x2400) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x1) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x328bf73655a6ff3d, 0x0, &(0x7f0000000040)=""/157, 0x9d}, &(0x7f0000000140)=0xfffffcbb) sendto$netrom(r0, &(0x7f0000000280)="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", 0xfc, 0x24000893, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:59:30 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x15\x12\xd3\x88b1\x06\x92\xceu\xe2\x92\x7f,\xee!\xec\xde\xae\xfa\xdf\x9fNL\x1e0\x8fA|XS}\xef\xa8\x93,\xe4\x14\a\v\x1d\x91\x83B\'\x98\xa2\x8a\x8dp\xccnl\xedX\xb9L\x1egbR\x05o\xa0.01\bj\xfd]\x85') 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r0, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000004, 0x10, 0xffffffffffffffff, 0x200) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000200)=[0xfffffffc, 0x8b, 0x0, 0xfff, 0x81], &(0x7f0000000240)=[0x0], 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400), 0x2400) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x1) (async) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x328bf73655a6ff3d, 0x0, &(0x7f0000000040)=""/157, 0x9d}, &(0x7f0000000140)=0xfffffcbb) sendto$netrom(r0, &(0x7f0000000280)="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", 0xfc, 0x24000893, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendto$netrom(r0, &(0x7f0000000280)="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", 0xfc, 0x24000893, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:59:30 executing program 0: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:59:30 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:59:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_io_uring_setup(0x711, &(0x7f0000000000)={0x0, 0xca2e, 0x2, 0x3, 0x25d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x20010, r1, 0x8000000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x71d1, 0x3, 0x730, 0x8, 0x0, 0x7fffffff, 0x8000, 0x100}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fee000/0x3000)=nil, 0x3000}}) 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r0, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) 00:59:30 executing program 0: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:59:30 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff0000/0x10000)=nil}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 0: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r0, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r0, 0x2) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:30 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:59:30 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_io_uring_setup(0x711, &(0x7f0000000000)={0x0, 0xca2e, 0x2, 0x3, 0x25d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x20010, r1, 0x8000000) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x71d1, 0x3, 0x730, 0x8, 0x0, 0x7fffffff, 0x8000, 0x100}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fee000/0x3000)=nil, 0x3000}}) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fee000/0x3000)=nil, 0x3000}}) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) 00:59:30 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) 00:59:30 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff0000/0x10000)=nil}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x28000}, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff0000/0x10000)=nil}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000004, 0x10, 0xffffffffffffffff, 0x200) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000200)=[0xfffffffc, 0x8b, 0x0, 0xfff, 0x81], &(0x7f0000000240)=[0x0], 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400), 0x2400) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x328bf73655a6ff3d, 0x0, &(0x7f0000000040)=""/157, 0x9d}, &(0x7f0000000140)=0xfffffcbb) sendto$netrom(r0, &(0x7f0000000280)="fa7f3f38538269f83fb16294f619a5279e7fc2bd8352b24bb7bd97e180edc1fd9429c734ed7c5942606a6890018fb15a1ea7df95d615b85f6e2cde6870fa56ac116f2985c19cc32eb4fa15cc7acd0bcf5ec6edf1ea3aae8d32b3af454f458ec49743e8c7c7344dbc8c40449e9299bfe4ecea75f754fc11f50a4f2e760ebf87445f767914540cbe9d0c5f967179b78f24fd6324f647d917c21b464036c8c731d7cc883975074085e649b821a56b4ee12500bcc37dd8ae0beca26563ad3fc41ecd138ca8d8f71adc489cd60b179ec1a390a07caf3cd189a07251a001200e954ebf465fa33cd25e05f4a1620ae5dd574d0a71db13200826a02539bb0cb7", 0xfc, 0x24000893, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:59:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_io_uring_setup(0x711, &(0x7f0000000000)={0x0, 0xca2e, 0x2, 0x3, 0x25d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x20010, r1, 0x8000000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x71d1, 0x3, 0x730, 0x8, 0x0, 0x7fffffff, 0x8000, 0x100}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x71d1, 0x3, 0x730, 0x8, 0x0, 0x7fffffff, 0x8000, 0x100}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fee000/0x3000)=nil, 0x3000}}) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) 00:59:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x28000}, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@generic={0x80, 0x5, 0xe, 0x1, 0x80000000}, @map_fd={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x8000, 0xce, &(0x7f0000000080)=""/206, 0x41000, 0x2, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x10000, 0x8}, 0x10}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x28000}, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:30 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:30 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@generic={0x80, 0x5, 0xe, 0x1, 0x80000000}, @map_fd={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x8000, 0xce, &(0x7f0000000080)=""/206, 0x41000, 0x2, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x10000, 0x8}, 0x10}, 0x80) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb37}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 00:59:30 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r1, 0x52) 00:59:30 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@generic={0x80, 0x5, 0xe, 0x1, 0x80000000}, @map_fd={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x8000, 0xce, &(0x7f0000000080)=""/206, 0x41000, 0x2, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x10000, 0x8}, 0x10}, 0x80) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:30 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb37}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (rerun: 32) 00:59:30 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb37}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r1, 0x52) 00:59:30 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:30 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb37}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 00:59:30 executing program 1: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) 00:59:30 executing program 0: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r1, 0x52) 00:59:30 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 1: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) (async) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:30 executing program 3: socketpair(0x23, 0x80000, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x191a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24048081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80e0}, 0x8080) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="a87ede790661", 0x6, 0x4040000, &(0x7f0000000040)={{0x3, @null, 0x7}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000018}, 0x40080) 00:59:30 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:30 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:31 executing program 0: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:31 executing program 1: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) (async) 00:59:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$dsp(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) 00:59:31 executing program 3: socketpair(0x23, 0x80000, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240), 0x80) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x191a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24048081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80e0}, 0x8080) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="a87ede790661", 0x6, 0x4040000, &(0x7f0000000040)={{0x3, @null, 0x7}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000018}, 0x40080) 00:59:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:31 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:31 executing program 0: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$dsp(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) 00:59:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:31 executing program 0: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:31 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x2000, 0x1000000000000}) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008040}, 0x802) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x8010, r2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) 00:59:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$dsp(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) 00:59:31 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x810, 0xffffffffffffffff, 0x0) 00:59:31 executing program 0: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:31 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x14) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, 0x0, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r16, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000080) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r12, 0xad1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 3: socketpair(0x23, 0x80000, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x191a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24048081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r1, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80e0}, 0x8080) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="a87ede790661", 0x6, 0x4040000, &(0x7f0000000040)={{0x3, @null, 0x7}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000018}, 0x40080) 00:59:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:31 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x2000, 0x1000000000000}) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008040}, 0x802) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x8010, r2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) 00:59:31 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x810, 0xffffffffffffffff, 0x0) 00:59:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:31 executing program 0: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:31 executing program 0: socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) 00:59:31 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x810, 0xffffffffffffffff, 0x0) 00:59:31 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:31 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:59:31 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x2000, 0x1000000000000}) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008040}, 0x802) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x8010, r2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x2000, 0x1000000000000}) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008040}, 0x802) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x8010, r2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) 00:59:31 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:31 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x14) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, 0x0, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r16, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000080) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r12, 0xad1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 0: socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) 00:59:31 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x14) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, 0x0, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r16, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000080) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r12, 0xad1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 2: setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:31 executing program 0: socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) 00:59:31 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async, rerun: 64) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x14) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, 0x0, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) (rerun: 64) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r16, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000080) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r12, 0xad1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 2: setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:31 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000000), 0x8) (async) rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:31 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:31 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 00:59:31 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f00000000c0)) 00:59:31 executing program 2: setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, r0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:31 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x14) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, 0x0, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r16, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000080) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r12, 0xad1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:31 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 00:59:31 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/.](\x00') 00:59:31 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, r0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, r0, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:31 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 00:59:32 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/.](\x00') 00:59:32 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000000), 0x8) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xe11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, r0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, r0, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:32 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f00000000c0)) 00:59:32 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f00000000c0)) 00:59:32 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/.](\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/.](\x00') 00:59:32 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) 00:59:32 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@default, @rose, @netrom, @rose, @null, @null, @netrom, @default]}, &(0x7f0000000080)=0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x10000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 00:59:32 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@default, @rose, @netrom, @rose, @null, @null, @netrom, @default]}, &(0x7f0000000080)=0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@default, @rose, @netrom, @rose, @null, @null, @netrom, @default]}, &(0x7f0000000080)=0x48) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 2: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCNRDECOBS(r0, 0x89e2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x10000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 00:59:32 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0)) 00:59:32 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) 00:59:32 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@default, @rose, @netrom, @rose, @null, @null, @netrom, @default]}, &(0x7f0000000080)=0x48) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) 00:59:32 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0)) 00:59:32 executing program 2: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCNRDECOBS(r0, 0x89e2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x3341, &(0x7f0000000000)={0x0, 0xd928, 0x2, 0x2, 0x58}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 00:59:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x40010, 0xffffffffffffffff, 0x0) 00:59:32 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0)) 00:59:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x10000000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 2: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCNRDECOBS(r0, 0x89e2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:32 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x3341, &(0x7f0000000000)={0x0, 0xd928, 0x2, 0x2, 0x58}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 00:59:32 executing program 0: socketpair(0x23, 0x2, 0x0, 0x0) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x40010, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x40010, 0xffffffffffffffff, 0x0) (async) 00:59:32 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x7]}, &(0x7f0000000040), 0x8) 00:59:32 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:32 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) syz_io_uring_setup(0x3341, &(0x7f0000000000)={0x0, 0xd928, 0x2, 0x2, 0x58}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 00:59:32 executing program 0: socketpair(0x23, 0x2, 0x0, 0x0) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 64) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x40010, 0xffffffffffffffff, 0x0) (rerun: 64) 00:59:32 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x7]}, &(0x7f0000000040), 0x8) 00:59:32 executing program 0: socketpair(0x23, 0x2, 0x0, 0x0) 00:59:32 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 64) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x165e, &(0x7f0000000000)={0x0, 0xc75f, 0x1, 0x1, 0x35a}) syz_io_uring_setup(0x3853, &(0x7f0000000080)={0x0, 0xa6f5, 0x8, 0x3, 0x232, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:59:32 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x10000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 00:59:32 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x7]}, &(0x7f0000000040), 0x8) 00:59:32 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) 00:59:32 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:32 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') (async) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0xd4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x165e, &(0x7f0000000000)={0x0, 0xc75f, 0x1, 0x1, 0x35a}) syz_io_uring_setup(0x3853, &(0x7f0000000080)={0x0, 0xa6f5, 0x8, 0x3, 0x232, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:59:32 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:32 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:32 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) r0 = io_uring_setup(0x165e, &(0x7f0000000000)={0x0, 0xc75f, 0x1, 0x1, 0x35a}) syz_io_uring_setup(0x3853, &(0x7f0000000080)={0x0, 0xa6f5, 0x8, 0x3, 0x232, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:59:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0xd4) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) syz_clone(0x49000100, &(0x7f00000000c0)="248dfe4be3b6a78b425a702e5e3cd76f08d8cc363fa3c546286609a39f5b14", 0x1f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="7a844ffba0eb5e13f954a5c868b6eff9666383d55e2fe0151acd01c33893b81656ed6e377198e7935d61e7e10800000000000000021e6c7537fa867d766b42967e4e910e46affefb82ccc3467da2d707866a5576e87d44171f3c4f074b2a62a22c70416b11a8c12bd9d82cea4ec266b25d7423fb91c3dd46d2a61ebf638b2e99e2a189e75a8d3b040556fa1814abd126d623e92d717ab47d9cca7a3667165d0783dec930a17f0ac98c21518ee148586511dce56bfd2d72850e8ff01057aaa77d3a29895adddea705f28e4c5b9f8ba600014392d87ff55386754988032eab7c557e241c72841e9b6b78af2a1921d50205f73721be1639ec2f6f5773b02107d7334e0f68e6a4cd15728a49076fc7fc18923fae2504cbf383630ed81a6b4845264987") r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x280000b, 0x10, r2, 0x0) mmap$qrtrtun(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x4, 0x2010, r1, 0xffffffffffff0000) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r1, 0x0) 00:59:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0xd4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x4000089) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0x0) 00:59:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x4000089) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 4: r0 = shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0x0) 00:59:33 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) syz_clone(0x49000100, &(0x7f00000000c0)="248dfe4be3b6a78b425a702e5e3cd76f08d8cc363fa3c546286609a39f5b14", 0x1f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="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") r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x280000b, 0x10, r2, 0x0) mmap$qrtrtun(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x4, 0x2010, r1, 0xffffffffffff0000) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r1, 0x0) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0x0) 00:59:33 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x4000089) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 4: r0 = shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x4207, r1) (async) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 1: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf252e00000006000600030000000c002d000203aa0700000000000000000200aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x440000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffe8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x8) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0xc6dfb22039c166b7, &(0x7f0000ffd000/0x2000)=nil) 00:59:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 1: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf252e00000006000600030000000c002d000203aa0700000000000000000200aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x440000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffe8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 4: r0 = shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x4207, r1) (async) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x8) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0xc6dfb22039c166b7, &(0x7f0000ffd000/0x2000)=nil) 00:59:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) (async) syz_clone(0x49000100, &(0x7f00000000c0)="248dfe4be3b6a78b425a702e5e3cd76f08d8cc363fa3c546286609a39f5b14", 0x1f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="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") r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x280000b, 0x10, r2, 0x0) (async) mmap$qrtrtun(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x4, 0x2010, r1, 0xffffffffffff0000) (async, rerun: 32) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) (rerun: 32) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r1, 0x0) 00:59:33 executing program 1: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf252e00000006000600030000000c002d000203aa0700000000000000000200aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x440000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffe8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x8) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0xc6dfb22039c166b7, &(0x7f0000ffd000/0x2000)=nil) 00:59:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) 00:59:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) (async) 00:59:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:33 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) 00:59:34 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:34 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r2, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25150000000c002c8008000400000000001ea6c87a128940aca5016c191598c8499637aa4cd8d820583b5b35a685eb079e41ec148e22a58cd4f241e157258b9ce6d4d877bf42f03a8e7f13d0ecf331b9684d3914e0e6123fbc48a7a4f1054dc328785a3e1a273106c00cb08b7ba8c72d135b17417496f74a2bbb41d5d036e1d39b9dff03000000000000f8dc4d43bbab4e44f2387683bd260f68313335b0fcb0264e31a0f17810fb2cc429a44d6e734e56c9180622f155a1e4b4add35e9f66a7cf17dd43018132eb7917d05916461e12879f37681f00b2af70ba7caea17b74a6d3b67b3b5ae89d0d31d761dfe2c90050666155719427c83c5e8361abccd62ed4c9735bcb91ba90930d92ddcda04f8770a65e563686abe4603fb40d8115c2e8598a50bc324362de6b372e875fb68245dacef2c6157a51d3b1b87e2021f9460569cd9cc278865cf4603ce6f5e809e649cfc2c07a73502bec7d4c2bcdd188e938df54aad3d29bbaecfc6e872636d10356ca"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="fb8ec0736246c8901304d8e6bfd3f733e062fc5f4705ce20eb718bd1d76b72610088d0489894ebfb14de111ccd812ad4587578999a285657ec760681ddd6e652037dff4e91ab1970ad013558b1a9b4636599328ba7ff9f12e39cdbb2cd3f7e408361c919067c2f20b82d3e035f6584a1185f8d713db2cbbfc0652ebd8c312ea7e29d304bed8f0a01210681efd9490d5f04a39a549ad12801b1c6cf4f8668bd182c476a9da50c56a85f3b8fd891916d5e"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x100, 0x70bd27, 0x5a, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20044880) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) 00:59:34 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x72b0, &(0x7f0000000040)={0x0, 0x3248, 0x200, 0x1, 0x1d8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) 00:59:34 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x72b0, &(0x7f0000000040)={0x0, 0x3248, 0x200, 0x1, 0x1d8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='cachefiles_trunc\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d757365722c63616368653d6d6d61702c63616368653d6d6d61702c6163636573733d757365722c7375626a5f757365723d285ba0272a2c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d8f794f53674080c399941b8d65f15ac084e0229d07fa76071892aab10bc654610492262d050a9dc2c50bf165ef14dd12c1eac028b7aabcaa2b88377fa897edab1d0d6166939525fd360f1b90cab6af75efbbc7982faba300af0fa7cd533d239e4b8664f89b9a365e5cd7d74cf183e4f8c70899ab0775f760ce52daac5c47f1c84ab1108fbb5cf54a32d7673275b80ea40664ed2a6de55948f945172354f45dd01a959f2fbe57d4c9ca27ddc38fc7c7072e36b5367729035619d45f6c100027cf162872a7e2e200"/231, @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d3a2c7063723d30303030303030303030303030303030303035342c6f626a5f757365723d2d2b3a29402d2c7bbceb2c00"]) 00:59:34 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:34 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x72b0, &(0x7f0000000040)={0x0, 0x3248, 0x200, 0x1, 0x1d8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r2, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25150000000c002c8008000400000000001ea6c87a128940aca5016c191598c8499637aa4cd8d820583b5b35a685eb079e41ec148e22a58cd4f241e157258b9ce6d4d877bf42f03a8e7f13d0ecf331b9684d3914e0e6123fbc48a7a4f1054dc328785a3e1a273106c00cb08b7ba8c72d135b17417496f74a2bbb41d5d036e1d39b9dff03000000000000f8dc4d43bbab4e44f2387683bd260f68313335b0fcb0264e31a0f17810fb2cc429a44d6e734e56c9180622f155a1e4b4add35e9f66a7cf17dd43018132eb7917d05916461e12879f37681f00b2af70ba7caea17b74a6d3b67b3b5ae89d0d31d761dfe2c90050666155719427c83c5e8361abccd62ed4c9735bcb91ba90930d92ddcda04f8770a65e563686abe4603fb40d8115c2e8598a50bc324362de6b372e875fb68245dacef2c6157a51d3b1b87e2021f9460569cd9cc278865cf4603ce6f5e809e649cfc2c07a73502bec7d4c2bcdd188e938df54aad3d29bbaecfc6e872636d10356ca"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="fb8ec0736246c8901304d8e6bfd3f733e062fc5f4705ce20eb718bd1d76b72610088d0489894ebfb14de111ccd812ad4587578999a285657ec760681ddd6e652037dff4e91ab1970ad013558b1a9b4636599328ba7ff9f12e39cdbb2cd3f7e408361c919067c2f20b82d3e035f6584a1185f8d713db2cbbfc0652ebd8c312ea7e29d304bed8f0a01210681efd9490d5f04a39a549ad12801b1c6cf4f8668bd182c476a9da50c56a85f3b8fd891916d5e"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x100, 0x70bd27, 0x5a, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20044880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:34 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:34 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='cachefiles_trunc\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d757365722c63616368653d6d6d61702c63616368653d6d6d61702c6163636573733d757365722c7375626a5f757365723d285ba0272a2c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d8f794f53674080c399941b8d65f15ac084e0229d07fa76071892aab10bc654610492262d050a9dc2c50bf165ef14dd12c1eac028b7aabcaa2b88377fa897edab1d0d6166939525fd360f1b90cab6af75efbbc7982faba300af0fa7cd533d239e4b8664f89b9a365e5cd7d74cf183e4f8c70899ab0775f760ce52daac5c47f1c84ab1108fbb5cf54a32d7673275b80ea40664ed2a6de55948f945172354f45dd01a959f2fbe57d4c9ca27ddc38fc7c7072e36b5367729035619d45f6c100027cf162872a7e2e200"/231, @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d3a2c7063723d30303030303030303030303030303030303035342c6f626a5f757365723d2d2b3a29402d2c7bbceb2c00"]) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:34 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:34 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:34 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='cachefiles_trunc\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d757365722c63616368653d6d6d61702c63616368653d6d6d61702c6163636573733d757365722c7375626a5f757365723d285ba0272a2c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d8f794f53674080c399941b8d65f15ac084e0229d07fa76071892aab10bc654610492262d050a9dc2c50bf165ef14dd12c1eac028b7aabcaa2b88377fa897edab1d0d6166939525fd360f1b90cab6af75efbbc7982faba300af0fa7cd533d239e4b8664f89b9a365e5cd7d74cf183e4f8c70899ab0775f760ce52daac5c47f1c84ab1108fbb5cf54a32d7673275b80ea40664ed2a6de55948f945172354f45dd01a959f2fbe57d4c9ca27ddc38fc7c7072e36b5367729035619d45f6c100027cf162872a7e2e200"/231, @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d3a2c7063723d30303030303030303030303030303030303035342c6f626a5f757365723d2d2b3a29402d2c7bbceb2c00"]) 00:59:34 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") (async, rerun: 32) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (rerun: 32) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/46, 0x2e, 0x1, &(0x7f0000000080)=""/68, 0x44}, &(0x7f0000000140)=0x40) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:34 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r2, 0x70a4bbb3633ecbe5}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="110e00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="fb8ec0736246c8901304d8e6bfd3f733e062fc5f4705ce20eb718bd1d76b72610088d0489894ebfb14de111ccd812ad4587578999a285657ec760681ddd6e652037dff4e91ab1970ad013558b1a9b4636599328ba7ff9f12e39cdbb2cd3f7e408361c919067c2f20b82d3e035f6584a1185f8d713db2cbbfc0652ebd8c312ea7e29d304bed8f0a01210681efd9490d5f04a39a549ad12801b1c6cf4f8668bd182c476a9da50c56a85f3b8fd891916d5e"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x100, 0x70bd27, 0x5a, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20044880) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r12) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000002c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) (rerun: 32) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:34 executing program 1: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) 00:59:34 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:34 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/46, 0x2e, 0x1, &(0x7f0000000080)=""/68, 0x44}, &(0x7f0000000140)=0x40) 00:59:34 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:34 executing program 1: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) (async) 00:59:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:34 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:35 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x72cd, &(0x7f0000000100)={0x0, 0xd22c, 0x304, 0x0, 0x377}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000822000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_io_uring_setup(0x494e, &(0x7f0000000000)={0x0, 0xaea, 0x20, 0x0, 0x156, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:35 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/46, 0x2e, 0x1, &(0x7f0000000080)=""/68, 0x44}, &(0x7f0000000140)=0x40) 00:59:35 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:35 executing program 1: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) 00:59:35 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:35 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0) 00:59:35 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) 00:59:35 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:35 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:35 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async, rerun: 32) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9042000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x1010, r1, 0x8000000) 00:59:35 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa813, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x72cd, &(0x7f0000000100)={0x0, 0xd22c, 0x304, 0x0, 0x377}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000822000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async, rerun: 64) syz_io_uring_setup(0x494e, &(0x7f0000000000)={0x0, 0xaea, 0x20, 0x0, 0x156, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) 00:59:36 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0) 00:59:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9042000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x1010, r1, 0x8000000) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, 0x0, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0x3, 0x3ff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000002c0)={0x1, 0x1, 0x5, 0x0, 0x3}, 0xc) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x21, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="f6ffff03000000002801a115573cada82164a88e34a8d622f11d3fbcb03edc2afad0153362a8bfeb85eccbbe9807dba4e9239e29401cffc317291e70261131d9ece2d37321e02a074af5eefb3d03fbd9fdac6db4037ea87c784386e42ef7318e1695e2c215e475ffbc811d890807107a73c8886cc4f587eabf179adfc5eaa1dfd87aba27b222f623be86455b003e73694b1d93a3baee52dd9606358278983b160e33045be46d1bff5435920fe41943e373f5e9e0a7cbb76fbd612822bd43f88741082b95d81d6bfe133944e664c2ea"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4800) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r9, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, 0x0, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9042000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 32) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x1010, r1, 0x8000000) (rerun: 32) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:36 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x0) 00:59:36 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) 00:59:36 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x5, 0x3, 0x3ff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000002c0)={0x1, 0x1, 0x5, 0x0, 0x3}, 0xc) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x21, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="f6ffff03000000002801a115573cada82164a88e34a8d622f11d3fbcb03edc2afad0153362a8bfeb85eccbbe9807dba4e9239e29401cffc317291e70261131d9ece2d37321e02a074af5eefb3d03fbd9fdac6db4037ea87c784386e42ef7318e1695e2c215e475ffbc811d890807107a73c8886cc4f587eabf179adfc5eaa1dfd87aba27b222f623be86455b003e73694b1d93a3baee52dd9606358278983b160e33045be46d1bff5435920fe41943e373f5e9e0a7cbb76fbd612822bd43f88741082b95d81d6bfe133944e664c2ea"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4800) (async) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r9, &(0x7f0000ffd000/0x3000)=nil, 0x1000) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (rerun: 32) 00:59:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x72cd, &(0x7f0000000100)={0x0, 0xd22c, 0x304, 0x0, 0x377}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000822000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_io_uring_setup(0x494e, &(0x7f0000000000)={0x0, 0xaea, 0x20, 0x0, 0x156, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x494e, &(0x7f0000000000)={0x0, 0xaea, 0x20, 0x0, 0x156, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, 0x0, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800004, 0x4010, 0xffffffffffffffff, 0x4) socketpair(0x9, 0x5, 0x401, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x44}}, 0x9) 00:59:36 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 00:59:36 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) 00:59:36 executing program 4: pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0x3, 0x3ff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000002c0)={0x1, 0x1, 0x5, 0x0, 0x3}, 0xc) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x21, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x21, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="f6ffff03000000002801a115573cada82164a88e34a8d622f11d3fbcb03edc2afad0153362a8bfeb85eccbbe9807dba4e9239e29401cffc317291e70261131d9ece2d37321e02a074af5eefb3d03fbd9fdac6db4037ea87c784386e42ef7318e1695e2c215e475ffbc811d890807107a73c8886cc4f587eabf179adfc5eaa1dfd87aba27b222f623be86455b003e73694b1d93a3baee52dd9606358278983b160e33045be46d1bff5435920fe41943e373f5e9e0a7cbb76fbd612822bd43f88741082b95d81d6bfe133944e664c2ea"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4800) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4800) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r9, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800004, 0x4010, 0xffffffffffffffff, 0x4) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800004, 0x4010, 0xffffffffffffffff, 0x4) socketpair(0x9, 0x5, 0x401, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x44}}, 0x9) 00:59:36 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) 00:59:36 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 00:59:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x1c2, &(0x7f0000000000)={0x0, 0xaaa1, 0x400, 0x1, 0x3e8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x810, r0, 0x8000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r4, 0x10000000) 00:59:36 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800004, 0x4010, 0xffffffffffffffff, 0x4) (async) socketpair(0x9, 0x5, 0x401, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x44}}, 0x9) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a6}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) 00:59:36 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) 00:59:36 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) io_uring_setup(0x1c2, &(0x7f0000000000)={0x0, 0xaaa1, 0x400, 0x1, 0x3e8}) (async) r0 = io_uring_setup(0x1c2, &(0x7f0000000000)={0x0, 0xaaa1, 0x400, 0x1, 0x3e8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x810, r0, 0x8000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r4, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r4, 0x10000000) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:36 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:36 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) 00:59:36 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:36 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:36 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, &(0x7f0000000100)) 00:59:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) r0 = io_uring_setup(0x1c2, &(0x7f0000000000)={0x0, 0xaaa1, 0x400, 0x1, 0x3e8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x810, r0, 0x8000000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r4, 0x10000000) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 00:59:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:37 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, &(0x7f0000000100)) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) 00:59:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 00:59:37 executing program 1: socketpair(0xc, 0x4, 0x8001, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x5, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:37 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, &(0x7f0000000100)) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 00:59:37 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), 0x0) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:59:37 executing program 1: socketpair(0xc, 0x4, 0x8001, &(0x7f0000000040)) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x5, 0x4) (async) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) 00:59:37 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), 0x0) 00:59:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 1: socketpair(0xc, 0x4, 0x8001, &(0x7f0000000040)) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x5, 0x4) (async) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) 00:59:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x0) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) 00:59:37 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') syz_io_uring_setup(0x5a13, &(0x7f0000000040), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), 0x0) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 00:59:37 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 00:59:37 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:37 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:37 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x10000000) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 00:59:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r0, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:37 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:37 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) (async) ptrace(0x4208, r2) (async) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async, rerun: 32) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) (async) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x10000000) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x6) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:37 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 00:59:37 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:37 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x1010, r0, 0x31) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x6) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:37 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x1010, r0, 0x31) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x1010, r0, 0x31) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x6) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x6) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:38 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) (async, rerun: 64) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) (async, rerun: 64) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) (async, rerun: 64) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) (async, rerun: 32) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) (async, rerun: 32) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x10000000) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x810, r0, 0x0) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0xff, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) 00:59:38 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x1010, r0, 0x31) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x1010, r0, 0x31) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x810, r0, 0x0) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:38 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/111, &(0x7f0000000180)="8e184827fd14e549a5588b83da75a778619efd2dc05a3e81abaf2e0981f898d9a1998e5a62e415b2b36e88d65ced7f3f16442da2cf09f77c197668fc2cbe12e6a0e9762ce0cc0ca471fd0dcff49b0cd519e5450bd2d827a355b3d737a58e2eaa8a7b76430b39f6e5d350470b122227a31538888291b05b368242b7fb489d2118a7cdf269697ba7a1e6ba8d15be7e45c23a17ec9c492cea5edb14ab5b0e8899a493b105b46b5d76feb9bc0858be54", &(0x7f0000000240)="2edc1bad19611a1a767dc3461ba6cdafe9d1509e829b3354fafa5af84886111f49b45cedf3c49c59cffd236597a94be7742757cc866a98526b5cf504b03759aa3dfa83ede073306e63faa7a539f6c6c085b7ce909057ed44a9048e1f901c5db8655b7710128628faaedbb6479e31cb620fbb3ad82ba44e7cb9cd9ce738573e10f3c1608d02d113430b7f71f3783fab", 0x6, 0xffffffffffffffff, 0x4}, 0x38) 00:59:38 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000), 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x10, 0xffffffffffffffff, 0x8000000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x810, r0, 0x0) 00:59:38 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000), 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x10, 0xffffffffffffffff, 0x8000000) 00:59:38 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/111, &(0x7f0000000180)="8e184827fd14e549a5588b83da75a778619efd2dc05a3e81abaf2e0981f898d9a1998e5a62e415b2b36e88d65ced7f3f16442da2cf09f77c197668fc2cbe12e6a0e9762ce0cc0ca471fd0dcff49b0cd519e5450bd2d827a355b3d737a58e2eaa8a7b76430b39f6e5d350470b122227a31538888291b05b368242b7fb489d2118a7cdf269697ba7a1e6ba8d15be7e45c23a17ec9c492cea5edb14ab5b0e8899a493b105b46b5d76feb9bc0858be54", &(0x7f0000000240)="2edc1bad19611a1a767dc3461ba6cdafe9d1509e829b3354fafa5af84886111f49b45cedf3c49c59cffd236597a94be7742757cc866a98526b5cf504b03759aa3dfa83ede073306e63faa7a539f6c6c085b7ce909057ed44a9048e1f901c5db8655b7710128628faaedbb6479e31cb620fbb3ad82ba44e7cb9cd9ce738573e10f3c1608d02d113430b7f71f3783fab", 0x6, 0xffffffffffffffff, 0x4}, 0x38) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r3 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x44010, r4, 0x5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0c000600030000000300000008000300966ff6e2039641fa92c64641246b84b3e26ed0792a0cfcc0005803df3b47c757f2f823dc157c51d0aad90e3234bbc06187fb0851f21dad245f84ced6329939f26be22226745e4ba9cd49312ff726b4252247c77783aec5f99c461e7d619436a62702f4282d2a52aed800066e2a3d318ef15d4f28fd657efc87bb95e82205c8d9a4b0c480d3", @ANYRES32=0x0, @ANYBLOB="05001a000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00060003000000000000000c000600a73859ae4168fea40c0006000000000000000000"], 0x6c}}, 0x20040000) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000), 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/111, &(0x7f0000000180)="8e184827fd14e549a5588b83da75a778619efd2dc05a3e81abaf2e0981f898d9a1998e5a62e415b2b36e88d65ced7f3f16442da2cf09f77c197668fc2cbe12e6a0e9762ce0cc0ca471fd0dcff49b0cd519e5450bd2d827a355b3d737a58e2eaa8a7b76430b39f6e5d350470b122227a31538888291b05b368242b7fb489d2118a7cdf269697ba7a1e6ba8d15be7e45c23a17ec9c492cea5edb14ab5b0e8899a493b105b46b5d76feb9bc0858be54", &(0x7f0000000240)="2edc1bad19611a1a767dc3461ba6cdafe9d1509e829b3354fafa5af84886111f49b45cedf3c49c59cffd236597a94be7742757cc866a98526b5cf504b03759aa3dfa83ede073306e63faa7a539f6c6c085b7ce909057ed44a9048e1f901c5db8655b7710128628faaedbb6479e31cb620fbb3ad82ba44e7cb9cd9ce738573e10f3c1608d02d113430b7f71f3783fab", 0x6, 0xffffffffffffffff, 0x4}, 0x38) 00:59:38 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x10, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x10, 0xffffffffffffffff, 0x8000000) (async) 00:59:38 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) 00:59:38 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x10000000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r3 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x44010, r4, 0x5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0c000600030000000300000008000300966ff6e2039641fa92c64641246b84b3e26ed0792a0cfcc0005803df3b47c757f2f823dc157c51d0aad90e3234bbc06187fb0851f21dad245f84ced6329939f26be22226745e4ba9cd49312ff726b4252247c77783aec5f99c461e7d619436a62702f4282d2a52aed800066e2a3d318ef15d4f28fd657efc87bb95e82205c8d9a4b0c480d3", @ANYRES32=0x0, @ANYBLOB="05001a000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00060003000000000000000c000600a73859ae4168fea40c0006000000000000000000"], 0x6c}}, 0x20040000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x44010, r4, 0x5) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0c000600030000000300000008000300966ff6e2039641fa92c64641246b84b3e26ed0792a0cfcc0005803df3b47c757f2f823dc157c51d0aad90e3234bbc06187fb0851f21dad245f84ced6329939f26be22226745e4ba9cd49312ff726b4252247c77783aec5f99c461e7d619436a62702f4282d2a52aed800066e2a3d318ef15d4f28fd657efc87bb95e82205c8d9a4b0c480d3", @ANYRES32=0x0, @ANYBLOB="05001a000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00060003000000000000000c000600a73859ae4168fea40c0006000000000000000000"], 0x6c}}, 0x20040000) (async) 00:59:38 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 5: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000), 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) 00:59:38 executing program 4: r0 = shmget(0x2, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r3 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x44010, r4, 0x5) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0c000600030000000300000008000300966ff6e2039641fa92c64641246b84b3e26ed0792a0cfcc0005803df3b47c757f2f823dc157c51d0aad90e3234bbc06187fb0851f21dad245f84ced6329939f26be22226745e4ba9cd49312ff726b4252247c77783aec5f99c461e7d619436a62702f4282d2a52aed800066e2a3d318ef15d4f28fd657efc87bb95e82205c8d9a4b0c480d3", @ANYRES32=0x0, @ANYBLOB="05001a000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00060003000000000000000c000600a73859ae4168fea40c0006000000000000000000"], 0x6c}}, 0x20040000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) 00:59:38 executing program 4: r0 = shmget(0x2, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x10000000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x200, 0x6, 0x6, 0x5, 0x2000000, 0xffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x2) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) 00:59:38 executing program 4: r0 = shmget(0x2, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x200, 0x6, 0x6, 0x5, 0x2000000, 0xffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x2) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x810, 0xffffffffffffffff, 0x10000000) 00:59:38 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xfffff8b4, &(0x7f0000000040)=0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:38 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:38 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x810, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x810, 0xffffffffffffffff, 0x10000000) (async) 00:59:39 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x10000000) 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x200, 0x6, 0x6, 0x5, 0x2000000, 0xffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x2) 00:59:39 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xfffff8b4, &(0x7f0000000040)=0x4) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:39 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x810, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x810, 0xffffffffffffffff, 0x10000000) (async) 00:59:39 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xfffff8b4, &(0x7f0000000040)=0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xfffff8b4, &(0x7f0000000040)=0x4) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:39 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/197, 0xc5, 0x0, &(0x7f0000000100)=""/160, 0xa0}, &(0x7f0000000200)=0x40) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:59:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000001774e95734b3aff0e013bf1a2f8a3562d428a1c12f76fcc5bc8d25e40e7c0485e25aaaa59732c7d88a458d6894d30bd699e54d326fa28ccdfd0eae72fca3b513aa62ca703e519449fe0609000000000000bd1774b19a", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf25070000000a0004007770616e300000000800050001000000"], 0x28}}, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/197, 0xc5, 0x0, &(0x7f0000000100)=""/160, 0xa0}, &(0x7f0000000200)=0x40) 00:59:39 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x6000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000001774e95734b3aff0e013bf1a2f8a3562d428a1c12f76fcc5bc8d25e40e7c0485e25aaaa59732c7d88a458d6894d30bd699e54d326fa28ccdfd0eae72fca3b513aa62ca703e519449fe0609000000000000bd1774b19a", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf25070000000a0004007770616e300000000800050001000000"], 0x28}}, 0x10) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/197, 0xc5, 0x0, &(0x7f0000000100)=""/160, 0xa0}, &(0x7f0000000200)=0x40) 00:59:39 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x6000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) shmat(0x0, &(0x7f0000ffa000/0x6000)=nil, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) (async) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000001774e95734b3aff0e013bf1a2f8a3562d428a1c12f76fcc5bc8d25e40e7c0485e25aaaa59732c7d88a458d6894d30bd699e54d326fa28ccdfd0eae72fca3b513aa62ca703e519449fe0609000000000000bd1774b19a", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf25070000000a0004007770616e300000000800050001000000"], 0x28}}, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f00000000c0), 0x8, 0xea01) 00:59:39 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f0000000040)=""/185, 0xb9}, &(0x7f0000000180)=0x40) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x6000)=nil, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) shmat(0x0, &(0x7f0000ffa000/0x6000)=nil, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) (async) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f0000000040)=""/185, 0xb9}, &(0x7f0000000180)=0x40) 00:59:39 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = io_uring_setup(0x32eb, &(0x7f0000000000)={0x0, 0x3cd0, 0x8c0, 0x1, 0x21}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf25030000000500290001000000050035000400000008000300", @ANYRES32=0x0, @ANYBLOB="06002f0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x44010, r0, 0x8000000) 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) accept$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @rose, @rose, @netrom, @bcast]}, &(0x7f0000000080)=0x48) 00:59:39 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) (async) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f0000000040)=""/185, 0xb9}, &(0x7f0000000180)=0x40) 00:59:39 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e22, 0xb8, @private2, 0x8}, 0x1, {[0x8000, 0x4, 0x8, 0xfffffffb, 0x5, 0x3ff, 0x3, 0x5]}}, 0x5c) 00:59:39 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = io_uring_setup(0x32eb, &(0x7f0000000000)={0x0, 0x3cd0, 0x8c0, 0x1, 0x21}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf25030000000500290001000000050035000400000008000300", @ANYRES32=0x0, @ANYBLOB="06002f0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x44010, r0, 0x8000000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) io_uring_setup(0x32eb, &(0x7f0000000000)={0x0, 0x3cd0, 0x8c0, 0x1, 0x21}) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf25030000000500290001000000050035000400000008000300", @ANYRES32=0x0, @ANYBLOB="06002f0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4800) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x44010, r0, 0x8000000) (async) 00:59:39 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) (async) accept$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @rose, @rose, @netrom, @bcast]}, &(0x7f0000000080)=0x48) 00:59:39 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x80000000) 00:59:39 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) accept$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @rose, @rose, @netrom, @bcast]}, &(0x7f0000000080)=0x48) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) io_uring_setup(0x32eb, &(0x7f0000000000)={0x0, 0x3cd0, 0x8c0, 0x1, 0x21}) (async) r0 = io_uring_setup(0x32eb, &(0x7f0000000000)={0x0, 0x3cd0, 0x8c0, 0x1, 0x21}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf25030000000500290001000000050035000400000008000300", @ANYRES32=0x0, @ANYBLOB="06002f0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x44010, r0, 0x8000000) 00:59:39 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000040)=[0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 00:59:39 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x80000000) 00:59:39 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:39 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x16, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff0000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:39 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:39 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x80000000) 00:59:39 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:39 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff0000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20000) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:39 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:40 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x16, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 00:59:40 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:40 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff0000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff0000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) (async) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) (async) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20000) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x16, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='}@\x00') 00:59:40 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 00:59:40 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x2c19, &(0x7f0000000000)={0x0, 0x1861, 0x80, 0x1, 0x15d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:40 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000500), 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0xa, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r0}) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) syz_io_uring_setup(0x2c19, &(0x7f0000000000)={0x0, 0x1861, 0x80, 0x1, 0x15d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000500), 0x4) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0xa, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r0}) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') 00:59:40 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x2c19, &(0x7f0000000000)={0x0, 0x1861, 0x80, 0x1, 0x15d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) syz_io_uring_setup(0x2c19, &(0x7f0000000000)={0x0, 0x1861, 0x80, 0x1, 0x15d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') 00:59:40 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000500), 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0xa, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r0}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000500), 0x4) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0xa, 0x5, 0x3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r0}) (async) 00:59:40 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') 00:59:40 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x6, 0x100, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, {[@timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xec6}, {@loopback, 0x5}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, {@empty}]}, @timestamp_addr={0x44, 0x3c, 0x69, 0x1, 0x9, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x1ff}, {@loopback, 0x8}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x2, 0x5, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008005}, 0x40000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:40 executing program 2: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010627bd7000fddbdf250500000008000500ac1414aa080005000000000008000500000dbba7a455d6c349360000000000000000f30000560600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x6, 0x100, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, {[@timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xec6}, {@loopback, 0x5}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, {@empty}]}, @timestamp_addr={0x44, 0x3c, 0x69, 0x1, 0x9, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x1ff}, {@loopback, 0x8}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x2, 0x5, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008005}, 0x40000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/146, 0x92, 0x1, &(0x7f00000000c0)=""/215, 0xd7}, &(0x7f0000000200)=0x40) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x10814ecdb2625c3b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) syz_io_uring_setup(0x12b4, &(0x7f0000000240)={0x0, 0x7fce, 0x20, 0x0, 0x1c7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 00:59:40 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:40 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 2: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010627bd7000fddbdf250500000008000500ac1414aa080005000000000008000500000dbba7a455d6c349360000000000000000f30000560600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x6, 0x100, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, {[@timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xec6}, {@loopback, 0x5}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, {@empty}]}, @timestamp_addr={0x44, 0x3c, 0x69, 0x1, 0x9, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x1ff}, {@loopback, 0x8}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x2, 0x5, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008005}, 0x40000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x2, 0x5, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008005}, 0x40000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/146, 0x92, 0x1, &(0x7f00000000c0)=""/215, 0xd7}, &(0x7f0000000200)=0x40) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x10814ecdb2625c3b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) syz_io_uring_setup(0x12b4, &(0x7f0000000240)={0x0, 0x7fce, 0x20, 0x0, 0x1c7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/146, 0x92, 0x1, &(0x7f00000000c0)=""/215, 0xd7}, &(0x7f0000000200)=0x40) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x10814ecdb2625c3b) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) (async) syz_io_uring_setup(0x12b4, &(0x7f0000000240)={0x0, 0x7fce, 0x20, 0x0, 0x1c7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) 00:59:40 executing program 2: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010627bd7000fddbdf250500000008000500ac1414aa080005000000000008000500000dbba7a455d6c349360000000000000000f30000560600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:40 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x2) 00:59:40 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/146, 0x92, 0x1, &(0x7f00000000c0)=""/215, 0xd7}, &(0x7f0000000200)=0x40) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x10814ecdb2625c3b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) syz_io_uring_setup(0x12b4, &(0x7f0000000240)={0x0, 0x7fce, 0x20, 0x0, 0x1c7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 00:59:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:40 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) (async) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x2) (async) 00:59:40 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:40 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0x5) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:41 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) (async) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x2) (async) 00:59:41 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0x5) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, 0xffffffffffffffff, 0x10000000) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) 00:59:41 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:41 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x2c19, &(0x7f0000000000)={0x0, 0x1861, 0x80, 0x1, 0x15d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0x5) 00:59:41 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$media(&(0x7f0000000280), 0x0, 0x2002) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:41 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x2c19, &(0x7f0000000000)={0x0, 0x1861, 0x80, 0x1, 0x15d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:41 executing program 4: shmat(0x0, &(0x7f00008e9000/0x4000)=nil, 0x5000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$media(&(0x7f0000000280), 0x0, 0x2002) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) syz_open_dev$media(&(0x7f0000000280), 0x0, 0x2002) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 1: accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @netrom, @null, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000080)=0x48, 0x80800) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) 00:59:41 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 00:59:41 executing program 4: shmat(0x0, &(0x7f00008e9000/0x4000)=nil, 0x5000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:41 executing program 1: accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @netrom, @null, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000080)=0x48, 0x80800) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) 00:59:41 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x1c2, &(0x7f0000000000)={0x0, 0xaaa1, 0x400, 0x1, 0x3e8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x810, r0, 0x8000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r4, 0x10000000) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$media(&(0x7f0000000280), 0x0, 0x2002) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 1: accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @netrom, @null, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000080)=0x48, 0x80800) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) 00:59:41 executing program 4: shmat(0x0, &(0x7f00008e9000/0x4000)=nil, 0x5000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:41 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x80000001, 0x9, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8084) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x220102, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000600)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{}, {}, {}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 00:59:41 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x80000001, 0x9, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8084) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x220102, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000600)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{}, {}, {}]}) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) move_pages(0x0, 0x8, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000080)=[0x9], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x80000001, 0x9, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8084) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x80000001, 0x9, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8084) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:41 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 00:59:41 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x220102, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000600)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{}, {}, {}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) 00:59:41 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 00:59:41 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:41 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) move_pages(0x0, 0x8, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000080)=[0x9], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) 00:59:41 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) 00:59:41 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:41 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xf8, r0, 0x7}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:41 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) 00:59:41 executing program 1: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 00:59:41 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 00:59:41 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x8) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xb, 0x2, 0x0, 0x190000}) 00:59:42 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) move_pages(0x0, 0x8, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000080)=[0x9], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:42 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 00:59:42 executing program 1: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) (async) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x8) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xb, 0x2, 0x0, 0x190000}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x8) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xb, 0x2, 0x0, 0x190000}) (async) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:59:42 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:42 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:42 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:42 executing program 1: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 00:59:42 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x8) (async, rerun: 32) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (rerun: 32) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async, rerun: 32) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xb, 0x2, 0x0, 0x190000}) (rerun: 32) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 00:59:42 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:42 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) 00:59:42 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:59:42 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:42 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) 00:59:42 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:59:42 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 00:59:42 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:59:42 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840), 0x80) 00:59:42 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 00:59:42 executing program 4: shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xf000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000fed000/0x13000)=nil) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) 00:59:42 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x40) 00:59:42 executing program 4: shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xf000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) 00:59:42 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840), 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:42 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000fed000/0x13000)=nil) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000fed000/0x13000)=nil) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) 00:59:42 executing program 4: shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xf000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) 00:59:42 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x40) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x40) (async) 00:59:42 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000fed000/0x13000)=nil) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) (async) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) 00:59:42 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:42 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:43 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69ca}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff946}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044040}, 0x480c0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7be}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x10004) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x40) 00:59:43 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69ca}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff946}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044040}, 0x480c0) (rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) (rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7be}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x10004) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69ca}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff946}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044040}, 0x480c0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x100, 0x70bd27, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7be}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x10004) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:59:43 executing program 0: bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 0: bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:43 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/136, 0x88}, &(0x7f0000001100)=0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:43 executing program 0: bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/136, 0x88}, &(0x7f0000001100)=0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x100000a, 0x810, r0, 0x7) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x6}, 0xc) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 5: syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/136, 0x88}, &(0x7f0000001100)=0x40) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 00:59:43 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 00:59:43 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x100000a, 0x810, r0, 0x7) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x6}, 0xc) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 00:59:43 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:43 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 00:59:43 executing program 5: syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:43 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:43 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x100000a, 0x810, r0, 0x7) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x6}, 0xc) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:43 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 00:59:43 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 00:59:43 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x7) 00:59:44 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:44 executing program 4: r0 = shmget(0x3, 0x2000, 0x1c0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/61, 0x3d, 0x0, &(0x7f0000000080)=""/87, 0x57}, &(0x7f0000000140)=0x40) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$dsp(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0x10, r1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 4: r0 = shmget(0x3, 0x2000, 0x1c0, &(0x7f0000ffe000/0x2000)=nil) (async) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 5: syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:44 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x7) 00:59:44 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 00:59:44 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/61, 0x3d, 0x0, &(0x7f0000000080)=""/87, 0x57}, &(0x7f0000000140)=0x40) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) mmap$dsp(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0x10, r1, 0x0) (async) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 4: r0 = shmget(0x3, 0x2000, 0x1c0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 00:59:44 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x7) 00:59:44 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/61, 0x3d, 0x0, &(0x7f0000000080)=""/87, 0x57}, &(0x7f0000000140)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/61, 0x3d, 0x0, &(0x7f0000000080)=""/87, 0x57}, &(0x7f0000000140)=0x40) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mmap$dsp(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0x10, r1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 4: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000080)="67c303045b2055929ec151900a1d8533108653569611adfdaca626dbcd9a31bb9194dfe8be9fa45cd43f54a68b222d20bfa4e523f81fabcfc562684f37dec5fc743fda5fe2906bb47d527c070c8d0ca32571f8251e1c2f45130931d181ed6b54e9711ca42667c27ff5d403b23e387efe3a92fd5996ae001f831f8df90fc163b7e60499b83740c694dbcd715e1c9616d65c06d0aa3ea04296eafb453e746d50928cf0943c9a887fabd2494214d22304dbb52ccd8bd8690b07fa556e6cd1e0de32f9ae423a2c2ab5b32229410ac3c90d6f8a5ab786fcd7a7d5a6647cd13dda6a54121db9a58d085a6da04ffa659f", &(0x7f0000000180)=""/209}, 0x20) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x2900, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x0, 0x8, 0x3, {{0x14, 0x4, 0x3, 0x3f, 0x50, 0x65, 0x0, 0x95, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x3c, 0x1, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x6}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@private=0xa010100, 0x1}, {@broadcast, 0x80000001}, {@private=0xa010101, 0x5}]}]}}}}}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x10400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xb0}, @call={0x85, 0x0, 0x0, 0x65}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x3, 0x8, 0x1, 0x18, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x11, &(0x7f00000003c0)=""/17, 0x40f00, 0x14, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0xfffffbff}, 0x10, 0x2dd15, r3}, 0x80) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 00:59:44 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f00000000c0)=""/145, 0x91}, &(0x7f00000001c0)=0x40) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x8000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80, 0x4) accept$netrom(r0, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @rose, @bcast, @remote, @netrom, @null]}, &(0x7f0000000180)=0x48) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) accept$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@default, @netrom, @null, @default, @null, @default]}, &(0x7f00000000c0)=0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:44 executing program 4: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000080)="67c303045b2055929ec151900a1d8533108653569611adfdaca626dbcd9a31bb9194dfe8be9fa45cd43f54a68b222d20bfa4e523f81fabcfc562684f37dec5fc743fda5fe2906bb47d527c070c8d0ca32571f8251e1c2f45130931d181ed6b54e9711ca42667c27ff5d403b23e387efe3a92fd5996ae001f831f8df90fc163b7e60499b83740c694dbcd715e1c9616d65c06d0aa3ea04296eafb453e746d50928cf0943c9a887fabd2494214d22304dbb52ccd8bd8690b07fa556e6cd1e0de32f9ae423a2c2ab5b32229410ac3c90d6f8a5ab786fcd7a7d5a6647cd13dda6a54121db9a58d085a6da04ffa659f", &(0x7f0000000180)=""/209}, 0x20) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x2900, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x0, 0x8, 0x3, {{0x14, 0x4, 0x3, 0x3f, 0x50, 0x65, 0x0, 0x95, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x3c, 0x1, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x6}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@private=0xa010100, 0x1}, {@broadcast, 0x80000001}, {@private=0xa010101, 0x5}]}]}}}}}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x10400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xb0}, @call={0x85, 0x0, 0x0, 0x65}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x3, 0x8, 0x1, 0x18, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x11, &(0x7f00000003c0)=""/17, 0x40f00, 0x14, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0xfffffbff}, 0x10, 0x2dd15, r3}, 0x80) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f00000000c0)=""/145, 0x91}, &(0x7f00000001c0)=0x40) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x8000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000240)={0x0, 0x22}, 0x10) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_io_uring_setup(0x4b23, &(0x7f0000000080)={0x0, 0x9ebd, 0x400, 0x6, 0x197, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x100000000) 00:59:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80, 0x4) accept$netrom(r0, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @rose, @bcast, @remote, @netrom, @null]}, &(0x7f0000000180)=0x48) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) accept$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@default, @netrom, @null, @default, @null, @default]}, &(0x7f00000000c0)=0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 00:59:44 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f00000000c0)=""/145, 0x91}, &(0x7f00000001c0)=0x40) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x8000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80, 0x4) (async) accept$netrom(r0, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @rose, @bcast, @remote, @netrom, @null]}, &(0x7f0000000180)=0x48) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) accept$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@default, @netrom, @null, @default, @null, @default]}, &(0x7f00000000c0)=0x48) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 4: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000080)="67c303045b2055929ec151900a1d8533108653569611adfdaca626dbcd9a31bb9194dfe8be9fa45cd43f54a68b222d20bfa4e523f81fabcfc562684f37dec5fc743fda5fe2906bb47d527c070c8d0ca32571f8251e1c2f45130931d181ed6b54e9711ca42667c27ff5d403b23e387efe3a92fd5996ae001f831f8df90fc163b7e60499b83740c694dbcd715e1c9616d65c06d0aa3ea04296eafb453e746d50928cf0943c9a887fabd2494214d22304dbb52ccd8bd8690b07fa556e6cd1e0de32f9ae423a2c2ab5b32229410ac3c90d6f8a5ab786fcd7a7d5a6647cd13dda6a54121db9a58d085a6da04ffa659f", &(0x7f0000000180)=""/209}, 0x20) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x2900, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x0, 0x8, 0x3, {{0x14, 0x4, 0x3, 0x3f, 0x50, 0x65, 0x0, 0x95, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x3c, 0x1, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x6}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@private=0xa010100, 0x1}, {@broadcast, 0x80000001}, {@private=0xa010101, 0x5}]}]}}}}}) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x10400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xb0}, @call={0x85, 0x0, 0x0, 0x65}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x3, 0x8, 0x1, 0x18, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x11, &(0x7f00000003c0)=""/17, 0x40f00, 0x14, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0xfffffbff}, 0x10, 0x2dd15, r3}, 0x80) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80, 0x4) accept$netrom(r0, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @rose, @bcast, @remote, @netrom, @null]}, &(0x7f0000000180)=0x48) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) accept$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@default, @netrom, @null, @default, @null, @default]}, &(0x7f00000000c0)=0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000fef000/0x4000)=nil, 0x6000) 00:59:44 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x12, 0xffffffffffffffff, 0x8000000) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil], &(0x7f0000000040)=[0x9, 0x6, 0x3f, 0x5, 0x5, 0x48, 0xffffffff, 0x80000000, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) set_mempolicy_home_node(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0) 00:59:44 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:44 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x20422000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) move_pages(r0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x574c1239, 0x2, 0x5, 0x7f, 0x1, 0x7f], &(0x7f00000001c0), 0x6) 00:59:44 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0000, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:44 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) 00:59:44 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x4, 0x9, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@noop, @cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "1357a601d7721b8a5275"}]}]}}}}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b74fe62ca5d9eeddff7d0e7b28acbc21e9939ca94dca5cb790d373bb87499fad7d7884bb5605c2b036a9e411d6b520346c7c316cee807e05411ccd5c1d662e6c34fd6d8701000080487770f7cd7d3b0ae4155f850369b918cdef4d73d448ac2d531ae3913041f1134cf6"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x37}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1029}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x81, 0x5, 0xd6, 0x7}, {0x2, 0x5a, 0x4, 0x1000}, {0x8001, 0x1, 0x7, 0x80000000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20044}, 0x400c810) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x100010, r8, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r8, 0x180000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:44 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 32) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x12, 0xffffffffffffffff, 0x8000000) (async, rerun: 32) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil], &(0x7f0000000040)=[0x9, 0x6, 0x3f, 0x5, 0x5, 0x48, 0xffffffff, 0x80000000, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) (async, rerun: 64) set_mempolicy_home_node(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0) (rerun: 64) 00:59:44 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) (async, rerun: 32) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (rerun: 32) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0000, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) 00:59:44 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x12, 0xffffffffffffffff, 0x8000000) (async) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil], &(0x7f0000000040)=[0x9, 0x6, 0x3f, 0x5, 0x5, 0x48, 0xffffffff, 0x80000000, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) set_mempolicy_home_node(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0) 00:59:44 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:44 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x4, 0x9, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@noop, @cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "1357a601d7721b8a5275"}]}]}}}}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b74fe62ca5d9eeddff7d0e7b28acbc21e9939ca94dca5cb790d373bb87499fad7d7884bb5605c2b036a9e411d6b520346c7c316cee807e05411ccd5c1d662e6c34fd6d8701000080487770f7cd7d3b0ae4155f850369b918cdef4d73d448ac2d531ae3913041f1134cf6"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x37}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1029}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x81, 0x5, 0xd6, 0x7}, {0x2, 0x5a, 0x4, 0x1000}, {0x8001, 0x1, 0x7, 0x80000000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20044}, 0x400c810) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x100010, r8, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r8, 0x180000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x4, 0x9, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@noop, @cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "1357a601d7721b8a5275"}]}]}}}}}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b74fe62ca5d9eeddff7d0e7b28acbc21e9939ca94dca5cb790d373bb87499fad7d7884bb5605c2b036a9e411d6b520346c7c316cee807e05411ccd5c1d662e6c34fd6d8701000080487770f7cd7d3b0ae4155f850369b918cdef4d73d448ac2d531ae3913041f1134cf6"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x37}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1029}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x81, 0x5, 0xd6, 0x7}, {0x2, 0x5a, 0x4, 0x1000}, {0x8001, 0x1, 0x7, 0x80000000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20044}, 0x400c810) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x100010, r8, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r8, 0x180000000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 00:59:45 executing program 3: r0 = shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 2: mlock2(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000000, 0x288a40) 00:59:45 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0x8000000) 00:59:45 executing program 4: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x4, 0x9, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@noop, @cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "1357a601d7721b8a5275"}]}]}}}}}) (async, rerun: 32) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b74fe62ca5d9eeddff7d0e7b28acbc21e9939ca94dca5cb790d373bb87499fad7d7884bb5605c2b036a9e411d6b520346c7c316cee807e05411ccd5c1d662e6c34fd6d8701000080487770f7cd7d3b0ae4155f850369b918cdef4d73d448ac2d531ae3913041f1134cf6"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x37}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1029}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x81, 0x5, 0xd6, 0x7}, {0x2, 0x5a, 0x4, 0x1000}, {0x8001, 0x1, 0x7, 0x80000000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20044}, 0x400c810) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x100010, r8, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r8, 0x180000000) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0000, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:45 executing program 2: mlock2(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000000, 0x288a40) 00:59:45 executing program 3: r0 = shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff6000/0x2000)=nil) 00:59:45 executing program 1: mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:45 executing program 2: mlock2(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000000, 0x288a40) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:45 executing program 1: mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:45 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:45 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 00:59:45 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:45 executing program 3: r0 = shmget(0x2, 0x2000, 0x7800019a, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r1) move_pages(r1, 0x6, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c08000/0x3000)=nil], &(0x7f0000000300)=[0x9, 0x8ccb, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x1, 0x2, 0x1, 0x2}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e42660a724d3ecd1091bd800f431513dff40ac3eab3bee2da81279295d883bf03d85b879b89c6af94c0ca2eafbb73be8bf8f391fc2021922b00592321cf6b196090d66272dfafd3f0679c82f6b46d03f50244fcc3cfe76fd651e74d825d79f7698c4494ab15669515e9ef5e57c41bd708020e4ced2388c151f48c572eb17a99766a08f69be9a6432fe47ce3dac7e6a23b6a9d9106ddcede65c4cb8af7fdbd39e4af43d3a052b20bc", 0xa8}, 0x1, 0x0, 0x0, 0x20040042}, 0x801) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 1: mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:45 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) (async, rerun: 32) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 0: mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:45 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 32) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 00:59:45 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5, 0x0, &(0x7f0000000200)=""/101, 0x65}, &(0x7f00000001c0)=0x40) 00:59:45 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:45 executing program 0: mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:45 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 00:59:45 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5, 0x0, &(0x7f0000000200)=""/101, 0x65}, &(0x7f00000001c0)=0x40) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5, 0x0, &(0x7f0000000200)=""/101, 0x65}, &(0x7f00000001c0)=0x40) (async) 00:59:45 executing program 0: mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:45 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:45 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:59:45 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0x0) 00:59:45 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 00:59:45 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5, 0x0, &(0x7f0000000200)=""/101, 0x65}, &(0x7f00000001c0)=0x40) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:45 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x0) 00:59:45 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 00:59:45 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2, 0x10, r0, 0x10000000) 00:59:45 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2, 0x10, r0, 0x10000000) (rerun: 32) 00:59:45 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0x0) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 00:59:46 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:59:46 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:46 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2, 0x10, r0, 0x10000000) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:46 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:46 executing program 1: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0xa, 0x1, 0x10, 0x4, 0x5c9acfc40fc42deb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x30, &(0x7f0000000080)=""/48, 0x1e00, 0x1f, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x2, 0x7, 0x5}, 0x10, 0x30c71, r1}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x220, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0x0) 00:59:46 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2800) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:46 executing program 0: mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:46 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2800) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:46 executing program 1: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0xa, 0x1, 0x10, 0x4, 0x5c9acfc40fc42deb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x30, &(0x7f0000000080)=""/48, 0x1e00, 0x1f, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x2, 0x7, 0x5}, 0x10, 0x30c71, r1}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x220, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2800) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:59:46 executing program 0: mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:46 executing program 1: pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0xa, 0x1, 0x10, 0x4, 0x5c9acfc40fc42deb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x30, &(0x7f0000000080)=""/48, 0x1e00, 0x1f, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x2, 0x7, 0x5}, 0x10, 0x30c71, r1}, 0x80) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x220, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0xa, 0x1, 0x10, 0x4, 0x5c9acfc40fc42deb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x30, &(0x7f0000000080)=""/48, 0x1e00, 0x1f, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x2, 0x7, 0x5}, 0x10, 0x30c71, r1}, 0x80) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x3000, 0x220, &(0x7f0000ffd000/0x3000)=nil) (async) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async) 00:59:46 executing program 4: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r0, 0x8000000) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3418268d96dc1e75, 0x100010, 0xffffffffffffffff, 0x2b) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair(0x2b, 0xd, 0x7ad, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 0: mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:59:46 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xee0057217d8b2788, 0x46809481e1447ed5, 0xffffffffffffffff, 0x80000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 4: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async, rerun: 32) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r0, 0x8000000) (rerun: 32) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3418268d96dc1e75, 0x100010, 0xffffffffffffffff, 0x2b) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 32) socketpair(0x2b, 0xd, 0x7ad, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 0: mlock2(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x0) 00:59:46 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xee0057217d8b2788, 0x46809481e1447ed5, 0xffffffffffffffff, 0x80000000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:59:46 executing program 4: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r0, 0x8000000) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3418268d96dc1e75, 0x100010, 0xffffffffffffffff, 0x2b) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair(0x2b, 0xd, 0x7ad, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r0, 0x8000000) (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3418268d96dc1e75, 0x100010, 0xffffffffffffffff, 0x2b) (async) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) socketpair(0x2b, 0xd, 0x7ad, &(0x7f0000000000)) (async) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) (async) 00:59:46 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:59:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xee0057217d8b2788, 0x46809481e1447ed5, 0xffffffffffffffff, 0x80000000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x2000, 0x480, &(0x7f0000ffb000/0x2000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 00:59:46 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008001) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x480, &(0x7f0000ffb000/0x2000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 00:59:46 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008001) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x480, &(0x7f0000ffb000/0x2000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 00:59:46 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:46 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 00:59:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008001) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:47 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x2000, &(0x7f0000000000)="1c2f6368be5ebeb5acd1f2f079511282b08f7dd68f8ba9c6a82982c45f5f98e347d9cf37bbd4dfac5abd867c7332d598df1733900a530540a6448c4393f86e4bccc131d272369e848be33a8bd944c6e32986ebd6c311ad300066ba23b9949c296d37eec6b5259b68acdda76180efadeaafcb8ccc3f99be4138ba79a6829a17d9b91e18be432b198b1778a5ec2f5f28f9e5af6dfa7881d0c5b5bbcae676173cb9ef6ab0190e0d88ab1b7af58453cda7ebf4404d9e47abd1ad", 0xb8, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="a97f0aeb7d97cbb6d4ebd3dce4705c013e3e3086ac9019bdbe0a2f12c798853cb2aada0ca58dcb5d3e6e3692677eff3f4241881599444f2845ced90b497eddffa55ff395a02035f91d0a890cf1bb8418e4962118bafd01f1fdfa4b2e0dcbc56ee47950cfc88f7f9c0e1d4c2c6901388b5a7e3d61f1c3ecf481c956bab94529d7ec862378d264265db2") move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000240)=[0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x20040001) 00:59:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8015) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=')$}*(*[\x00') 00:59:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfd9bc}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x14000480) 00:59:47 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_clone(0x2000, &(0x7f0000000000)="1c2f6368be5ebeb5acd1f2f079511282b08f7dd68f8ba9c6a82982c45f5f98e347d9cf37bbd4dfac5abd867c7332d598df1733900a530540a6448c4393f86e4bccc131d272369e848be33a8bd944c6e32986ebd6c311ad300066ba23b9949c296d37eec6b5259b68acdda76180efadeaafcb8ccc3f99be4138ba79a6829a17d9b91e18be432b198b1778a5ec2f5f28f9e5af6dfa7881d0c5b5bbcae676173cb9ef6ab0190e0d88ab1b7af58453cda7ebf4404d9e47abd1ad", 0xb8, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="a97f0aeb7d97cbb6d4ebd3dce4705c013e3e3086ac9019bdbe0a2f12c798853cb2aada0ca58dcb5d3e6e3692677eff3f4241881599444f2845ced90b497eddffa55ff395a02035f91d0a890cf1bb8418e4962118bafd01f1fdfa4b2e0dcbc56ee47950cfc88f7f9c0e1d4c2c6901388b5a7e3d61f1c3ecf481c956bab94529d7ec862378d264265db2") move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000240)=[0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x20040001) 00:59:47 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8015) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=')$}*(*[\x00') 00:59:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfd9bc}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x14000480) 00:59:47 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 3: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008840) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 00:59:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8015) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=')$}*(*[\x00') 00:59:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfd9bc}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x14000480) 00:59:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 00:59:47 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_clone(0x2000, &(0x7f0000000000)="1c2f6368be5ebeb5acd1f2f079511282b08f7dd68f8ba9c6a82982c45f5f98e347d9cf37bbd4dfac5abd867c7332d598df1733900a530540a6448c4393f86e4bccc131d272369e848be33a8bd944c6e32986ebd6c311ad300066ba23b9949c296d37eec6b5259b68acdda76180efadeaafcb8ccc3f99be4138ba79a6829a17d9b91e18be432b198b1778a5ec2f5f28f9e5af6dfa7881d0c5b5bbcae676173cb9ef6ab0190e0d88ab1b7af58453cda7ebf4404d9e47abd1ad", 0xb8, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="a97f0aeb7d97cbb6d4ebd3dce4705c013e3e3086ac9019bdbe0a2f12c798853cb2aada0ca58dcb5d3e6e3692677eff3f4241881599444f2845ced90b497eddffa55ff395a02035f91d0a890cf1bb8418e4962118bafd01f1fdfa4b2e0dcbc56ee47950cfc88f7f9c0e1d4c2c6901388b5a7e3d61f1c3ecf481c956bab94529d7ec862378d264265db2") move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000240)=[0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x20040001) 00:59:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 00:59:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) geteuid() mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b4") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 00:59:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) (async) 00:59:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r2 = shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) shmdt(r2) 00:59:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b444a3539dbc5dc75cc1eb48c668d3f48849e70020a87eddaec52f6dae9842fff0ca22408d479c046f842ffbe69ca16e26b13a079c7cd8494ceb924b1d5eb943015c34dc947333fdf71bd6f54c5031f460278a46c0e4844605a740243d9bb8d4565ab9bf9cdb5fd0908111fd21c700ef8877ac") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) 00:59:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 00:59:47 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 00:59:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r2 = shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) shmdt(r2) 00:59:47 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:47 executing program 1: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0xffffffffffffff2a) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:47 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r2 = shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) shmdt(r2) 00:59:47 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180002000) syz_open_dev$vim2m(&(0x7f0000000000), 0x49c, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0xa, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008880) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) 00:59:47 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:47 executing program 1: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0xffffffffffffff2a) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0xffffffffffffff2a) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:48 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:59:48 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000) 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:48 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 1) 00:59:48 executing program 1: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0xffffffffffffff2a) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async) pipe2$watch_queue(&(0x7f0000000840), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0xffffffffffffff2a) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) 00:59:48 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x4000)=nil) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) [ 3588.088374][T26428] FAULT_INJECTION: forcing a failure. [ 3588.088374][T26428] name failslab, interval 1, probability 0, space 0, times 0 00:59:48 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) [ 3588.109839][T26428] CPU: 1 PID: 26428 Comm: syz-executor.0 Not tainted 6.1.29-syzkaller #0 [ 3588.111989][T26428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.114406][T26428] Call trace: [ 3588.115260][T26428] dump_backtrace+0x1c8/0x1f4 [ 3588.116464][T26428] show_stack+0x2c/0x3c [ 3588.117566][T26428] dump_stack_lvl+0x108/0x170 [ 3588.118733][T26428] dump_stack+0x1c/0x5c [ 3588.119772][T26428] should_fail_ex+0x408/0x5d4 [ 3588.120917][T26428] __should_failslab+0xc8/0x128 [ 3588.122103][T26428] should_failslab+0x10/0x28 [ 3588.123155][T26428] kmem_cache_alloc+0x8c/0x37c [ 3588.124444][T26428] mas_alloc_nodes+0x228/0x704 [ 3588.125659][T26428] mas_preallocate+0x124/0x2dc [ 3588.126777][T26428] __vma_adjust+0x2d4/0x17a8 [ 3588.127907][T26428] vma_merge+0xabc/0xb4c [ 3588.128935][T26428] mlock_fixup+0x258/0x470 [ 3588.130125][T26428] apply_vma_lock_flags+0x2bc/0x3f8 [ 3588.131439][T26428] do_mlock+0x430/0x590 [ 3588.132487][T26428] __arm64_sys_mlock2+0xb4/0xd8 [ 3588.133683][T26428] invoke_syscall+0x98/0x2c0 [ 3588.134899][T26428] el0_svc_common+0x138/0x258 [ 3588.136018][T26428] do_el0_svc+0x64/0x218 [ 3588.137068][T26428] el0_svc+0x58/0x168 [ 3588.138043][T26428] el0t_64_sync_handler+0x84/0xf0 [ 3588.139349][T26428] el0t_64_sync+0x18c/0x190 00:59:48 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b4") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 1) 00:59:48 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = syz_clone(0x40100, &(0x7f0000000000)="a7f5885643ee1728f56f950012fe2f589affb1c1eacb8dea957d67a3c33a0aa0d28663f8987fbb3eaaeffb21f9f14c1e8f9b334f8ab0459ed17cb92d8d8320cb1017347e10f7a5cca0cd2bc2541d7d165382b628fd0faaa468fe038b69fcac", 0x5f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a8da1d18a4c530cd0bbf89148f92dbf9173df1f145bfa559edfa9a") syz_clone(0x84b10480, &(0x7f00000002c0)="f98b30bafac9c605212f97365512a59f0232daa02dafc5460b54c5888476200b6f7e3e2d121c87e381e8732d3dab7b1d3d259355b00a7449e4e6d3c468c987b4f1b3090f23967f8377cf515cc180855746715126cb31177c9009", 0x5a, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="4510fa0896b9c098bcae4d277c39408bcc510ff2bc42174b7c634e33d8a489d91d9e262c8109f5dddf0860e3e75331c0427d7f217980a9f6ed0d92ff4169c5b0693e348c6f719727970fe73abde080657166218e233619c2f9b3f7467aaa5d9d703e7f4200c82cae8a3281a214") move_pages(r0, 0x0, &(0x7f0000000440), &(0x7f0000000480)=[0x6, 0x8000, 0x7fffffff, 0xfffff24a, 0xa000, 0x3], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0x7], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0) move_pages(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x1ff, 0x23, 0x180d, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 00:59:48 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) r0 = io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:48 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x4000)=nil) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) [ 3588.221683][T26446] FAULT_INJECTION: forcing a failure. [ 3588.221683][T26446] name failslab, interval 1, probability 0, space 0, times 0 [ 3588.230917][T26446] CPU: 1 PID: 26446 Comm: syz-executor.5 Not tainted 6.1.29-syzkaller #0 [ 3588.232971][T26446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.235386][T26446] Call trace: [ 3588.236144][T26446] dump_backtrace+0x1c8/0x1f4 [ 3588.237310][T26446] show_stack+0x2c/0x3c [ 3588.238401][T26446] dump_stack_lvl+0x108/0x170 [ 3588.239605][T26446] dump_stack+0x1c/0x5c [ 3588.240676][T26446] should_fail_ex+0x408/0x5d4 [ 3588.241819][T26446] __should_failslab+0xc8/0x128 [ 3588.242997][T26446] should_failslab+0x10/0x28 [ 3588.244178][T26446] kmem_cache_alloc+0x8c/0x37c [ 3588.245421][T26446] vm_area_dup+0x30/0x1c8 [ 3588.246569][T26446] __split_vma+0xcc/0x4b4 [ 3588.247637][T26446] split_vma+0xa0/0xf8 [ 3588.248746][T26446] mlock_fixup+0x3c4/0x470 [ 3588.249851][T26446] apply_vma_lock_flags+0x2bc/0x3f8 [ 3588.251128][T26446] do_mlock+0x430/0x590 [ 3588.252201][T26446] __arm64_sys_mlock2+0xb4/0xd8 [ 3588.253488][T26446] invoke_syscall+0x98/0x2c0 [ 3588.254676][T26446] el0_svc_common+0x138/0x258 [ 3588.255759][T26446] do_el0_svc+0x64/0x218 [ 3588.256825][T26446] el0_svc+0x58/0x168 [ 3588.257819][T26446] el0t_64_sync_handler+0x84/0xf0 [ 3588.259096][T26446] el0t_64_sync+0x18c/0x190 00:59:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:59:48 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 2) 00:59:48 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_clone(0x40100, &(0x7f0000000000)="a7f5885643ee1728f56f950012fe2f589affb1c1eacb8dea957d67a3c33a0aa0d28663f8987fbb3eaaeffb21f9f14c1e8f9b334f8ab0459ed17cb92d8d8320cb1017347e10f7a5cca0cd2bc2541d7d165382b628fd0faaa468fe038b69fcac", 0x5f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a8da1d18a4c530cd0bbf89148f92dbf9173df1f145bfa559edfa9a") (async) r0 = syz_clone(0x40100, &(0x7f0000000000)="a7f5885643ee1728f56f950012fe2f589affb1c1eacb8dea957d67a3c33a0aa0d28663f8987fbb3eaaeffb21f9f14c1e8f9b334f8ab0459ed17cb92d8d8320cb1017347e10f7a5cca0cd2bc2541d7d165382b628fd0faaa468fe038b69fcac", 0x5f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a8da1d18a4c530cd0bbf89148f92dbf9173df1f145bfa559edfa9a") syz_clone(0x84b10480, &(0x7f00000002c0)="f98b30bafac9c605212f97365512a59f0232daa02dafc5460b54c5888476200b6f7e3e2d121c87e381e8732d3dab7b1d3d259355b00a7449e4e6d3c468c987b4f1b3090f23967f8377cf515cc180855746715126cb31177c9009", 0x5a, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="4510fa0896b9c098bcae4d277c39408bcc510ff2bc42174b7c634e33d8a489d91d9e262c8109f5dddf0860e3e75331c0427d7f217980a9f6ed0d92ff4169c5b0693e348c6f719727970fe73abde080657166218e233619c2f9b3f7467aaa5d9d703e7f4200c82cae8a3281a214") move_pages(r0, 0x0, &(0x7f0000000440), &(0x7f0000000480)=[0x6, 0x8000, 0x7fffffff, 0xfffff24a, 0xa000, 0x3], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) move_pages(r0, 0x0, &(0x7f0000000440), &(0x7f0000000480)=[0x6, 0x8000, 0x7fffffff, 0xfffff24a, 0xa000, 0x3], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0x7], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0) move_pages(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x1ff, 0x23, 0x180d, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 00:59:48 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) io_uring_setup(0x7c2c, &(0x7f0000000000)={0x0, 0xc9ed, 0x400, 0x3, 0x1bc}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:48 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x4000)=nil) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) [ 3588.308555][T26459] FAULT_INJECTION: forcing a failure. [ 3588.308555][T26459] name failslab, interval 1, probability 0, space 0, times 0 [ 3588.320516][T26459] CPU: 1 PID: 26459 Comm: syz-executor.0 Not tainted 6.1.29-syzkaller #0 [ 3588.322637][T26459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.324980][T26459] Call trace: [ 3588.325739][T26459] dump_backtrace+0x1c8/0x1f4 [ 3588.326857][T26459] show_stack+0x2c/0x3c [ 3588.327790][T26459] dump_stack_lvl+0x108/0x170 [ 3588.328943][T26459] dump_stack+0x1c/0x5c [ 3588.329959][T26459] should_fail_ex+0x408/0x5d4 [ 3588.331134][T26459] __should_failslab+0xc8/0x128 [ 3588.332313][T26459] should_failslab+0x10/0x28 [ 3588.333374][T26459] kmem_cache_alloc_bulk+0x74/0x4fc [ 3588.334601][T26459] mas_alloc_nodes+0x358/0x704 [ 3588.335703][T26459] mas_preallocate+0x124/0x2dc [ 3588.336848][T26459] __vma_adjust+0x2d4/0x17a8 [ 3588.337920][T26459] vma_merge+0xabc/0xb4c [ 3588.338893][T26459] mlock_fixup+0x258/0x470 [ 3588.339880][T26459] apply_vma_lock_flags+0x2bc/0x3f8 [ 3588.341005][T26459] do_mlock+0x430/0x590 [ 3588.341859][T26459] __arm64_sys_mlock2+0xb4/0xd8 [ 3588.343015][T26459] invoke_syscall+0x98/0x2c0 [ 3588.344068][T26459] el0_svc_common+0x138/0x258 [ 3588.345157][T26459] do_el0_svc+0x64/0x218 [ 3588.346126][T26459] el0_svc+0x58/0x168 [ 3588.347006][T26459] el0t_64_sync_handler+0x84/0xf0 [ 3588.348184][T26459] el0t_64_sync+0x18c/0x190 00:59:48 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:48 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x20010, 0xffffffffffffffff, 0x8000000) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x20010, 0xffffffffffffffff, 0x2) 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:48 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b4") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 2) 00:59:48 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:59:48 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 3) 00:59:48 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x20010, 0xffffffffffffffff, 0x8000000) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x20010, 0xffffffffffffffff, 0x2) 00:59:48 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 1) [ 3588.501376][T26484] ------------[ cut here ]------------ [ 3588.503203][T26484] kernel BUG at lib/maple_tree.c:5789! [ 3588.504669][T26484] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 3588.506401][T26484] Modules linked in: [ 3588.507257][T26484] CPU: 1 PID: 26484 Comm: syz-executor.0 Not tainted 6.1.29-syzkaller #0 [ 3588.509284][T26484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.511564][T26484] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 3588.513409][T26484] pc : mas_store_prealloc+0x3a8/0x3ac [ 3588.514717][T26484] lr : mas_store_prealloc+0x3a8/0x3ac [ 3588.515979][T26484] sp : ffff80002c3f7520 [ 3588.516917][T26484] x29: ffff80002c3f7600 x28: 1ffff0000587eeff x27: dfff800000000000 [ 3588.518862][T26484] x26: ffff70000587eea8 x25: 0000000020ffc000 x24: 0000000000000001 [ 3588.520735][T26484] x23: 1ffff0000587eeac x22: ffff80002c3f77f8 x21: ffffffffffffffd2 [ 3588.522035][T26491] FAULT_INJECTION: forcing a failure. [ 3588.522035][T26491] name failslab, interval 1, probability 0, space 0, times 0 [ 3588.522478][T26484] x20: 0000000000000002 x19: ffff80002c3f77e0 x18: 0000000000000000 [ 3588.527368][T26484] x17: ffff0000cdf4f5e8 x16: ffff8000084fafa0 x15: 0000000000000000 [ 3588.529231][T26484] x14: 0000000000000002 x13: 0000000000000000 x12: 0000000000040000 [ 3588.530224][T26491] CPU: 0 PID: 26491 Comm: syz-executor.3 Not tainted 6.1.29-syzkaller #0 [ 3588.531092][T26484] x11: 0000000000001370 [ 3588.532985][T26491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.533860][T26484] x10: ffff80001e4d9000 [ 3588.536237][T26491] Call trace: [ 3588.536245][T26491] dump_backtrace+0x1c8/0x1f4 [ 3588.537188][T26484] x9 : ffff8000120696ac [ 3588.537921][T26491] show_stack+0x2c/0x3c [ 3588.539025][T26484] [ 3588.539997][T26491] dump_stack_lvl+0x108/0x170 [ 3588.540958][T26484] x8 : 0000000000001371 [ 3588.541471][T26491] dump_stack+0x1c/0x5c [ 3588.542470][T26484] x7 : 0000000000000000 [ 3588.543392][T26491] should_fail_ex+0x408/0x5d4 [ 3588.544361][T26484] x6 : 000000000000003f [ 3588.545361][T26491] __should_failslab+0xc8/0x128 [ 3588.546424][T26484] [ 3588.546429][T26484] x5 : 0000000000000040 [ 3588.547485][T26491] should_failslab+0x10/0x28 [ 3588.548538][T26484] x4 : 00000000ffffffff [ 3588.549025][T26491] __kmem_cache_alloc_node+0x80/0x388 [ 3588.549908][T26484] x3 : 0000000000002800 [ 3588.550977][T26491] kmalloc_trace+0x48/0x94 [ 3588.551933][T26484] [ 3588.551938][T26484] x2 : ffff0000c000d500 [ 3588.553114][T26491] newseg+0x218/0x914 [ 3588.554100][T26484] x1 : 0000000000000002 [ 3588.555120][T26491] ipcget+0x7e4/0xb68 [ 3588.555651][T26484] x0 : 0000000000000002 [ 3588.556691][T26491] __arm64_sys_shmget+0x158/0x1d8 [ 3588.557557][T26484] [ 3588.557562][T26484] Call trace: [ 3588.558490][T26491] invoke_syscall+0x98/0x2c0 [ 3588.559314][T26484] mas_store_prealloc+0x3a8/0x3ac [ 3588.560306][T26491] el0_svc_common+0x138/0x258 [ 3588.561503][T26484] vma_mas_store+0x19c/0x490 [ 3588.562004][T26491] do_el0_svc+0x64/0x218 [ 3588.562708][T26484] __vma_adjust+0xec8/0x17a8 [ 3588.563770][T26491] el0_svc+0x58/0x168 [ 3588.564908][T26484] vma_merge+0xabc/0xb4c [ 3588.566003][T26491] el0t_64_sync_handler+0x84/0xf0 [ 3588.567071][T26484] mlock_fixup+0x258/0x470 [ 3588.568072][T26491] el0t_64_sync+0x18c/0x190 [ 3588.569120][T26484] apply_vma_lock_flags+0x2bc/0x3f8 [ 3588.575535][T26484] do_mlock+0x430/0x590 00:59:48 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) r0 = syz_clone(0x40100, &(0x7f0000000000)="a7f5885643ee1728f56f950012fe2f589affb1c1eacb8dea957d67a3c33a0aa0d28663f8987fbb3eaaeffb21f9f14c1e8f9b334f8ab0459ed17cb92d8d8320cb1017347e10f7a5cca0cd2bc2541d7d165382b628fd0faaa468fe038b69fcac", 0x5f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a8da1d18a4c530cd0bbf89148f92dbf9173df1f145bfa559edfa9a") syz_clone(0x84b10480, &(0x7f00000002c0)="f98b30bafac9c605212f97365512a59f0232daa02dafc5460b54c5888476200b6f7e3e2d121c87e381e8732d3dab7b1d3d259355b00a7449e4e6d3c468c987b4f1b3090f23967f8377cf515cc180855746715126cb31177c9009", 0x5a, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="4510fa0896b9c098bcae4d277c39408bcc510ff2bc42174b7c634e33d8a489d91d9e262c8109f5dddf0860e3e75331c0427d7f217980a9f6ed0d92ff4169c5b0693e348c6f719727970fe73abde080657166218e233619c2f9b3f7467aaa5d9d703e7f4200c82cae8a3281a214") (async) move_pages(r0, 0x0, &(0x7f0000000440), &(0x7f0000000480)=[0x6, 0x8000, 0x7fffffff, 0xfffff24a, 0xa000, 0x3], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0x7], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0) move_pages(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0x1ff, 0x23, 0x180d, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) [ 3588.576559][T26484] __arm64_sys_mlock2+0xb4/0xd8 [ 3588.577710][T26484] invoke_syscall+0x98/0x2c0 [ 3588.578804][T26484] el0_svc_common+0x138/0x258 [ 3588.579840][T26484] do_el0_svc+0x64/0x218 [ 3588.580943][T26484] el0_svc+0x58/0x168 [ 3588.581907][T26484] el0t_64_sync_handler+0x84/0xf0 [ 3588.583109][T26484] el0t_64_sync+0x18c/0x190 [ 3588.584164][T26484] Code: 977ad60d 17ffff7b 94020721 977acede (d4210000) [ 3588.585894][T26484] ---[ end trace 0000000000000000 ]--- 00:59:48 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 2) [ 3588.663624][T26496] FAULT_INJECTION: forcing a failure. [ 3588.663624][T26496] name failslab, interval 1, probability 0, space 0, times 0 [ 3588.671280][T26496] CPU: 0 PID: 26496 Comm: syz-executor.3 Tainted: G D 6.1.29-syzkaller #0 [ 3588.673891][T26496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.676446][T26496] Call trace: [ 3588.677244][T26496] dump_backtrace+0x1c8/0x1f4 [ 3588.678388][T26496] show_stack+0x2c/0x3c [ 3588.679434][T26496] dump_stack_lvl+0x108/0x170 [ 3588.680605][T26496] dump_stack+0x1c/0x5c [ 3588.681585][T26496] should_fail_ex+0x408/0x5d4 [ 3588.682729][T26496] __should_failslab+0xc8/0x128 [ 3588.683984][T26496] should_failslab+0x10/0x28 [ 3588.685066][T26496] slab_pre_alloc_hook+0x6c/0x33c [ 3588.686209][T26496] kmem_cache_alloc_lru+0x64/0x2f8 [ 3588.687370][T26496] shmem_alloc_inode+0x2c/0x48 [ 3588.688447][T26496] new_inode_pseudo+0x68/0x1d0 [ 3588.689618][T26496] new_inode+0x38/0x174 [ 3588.690574][T26496] shmem_get_inode+0x2fc/0xb00 [ 3588.691681][T26496] __shmem_file_setup+0x138/0x26c [ 3588.692802][T26496] shmem_kernel_file_setup+0x40/0x54 [ 3588.694057][T26496] newseg+0x3b0/0x914 [ 3588.695032][T26496] ipcget+0x7e4/0xb68 [ 3588.696012][T26496] __arm64_sys_shmget+0x158/0x1d8 [ 3588.697273][T26496] invoke_syscall+0x98/0x2c0 [ 3588.698319][T26496] el0_svc_common+0x138/0x258 [ 3588.699419][T26496] do_el0_svc+0x64/0x218 [ 3588.700413][T26496] el0_svc+0x58/0x168 [ 3588.701410][T26496] el0t_64_sync_handler+0x84/0xf0 [ 3588.702621][T26496] el0t_64_sync+0x18c/0x190 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x100000000) mlock2(&(0x7f00008fe000/0x3000)=nil, 0x3000, 0x0) 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x100000000) (async) mlock2(&(0x7f00008fe000/0x3000)=nil, 0x3000, 0x0) 00:59:48 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 3) [ 3588.841319][T26510] FAULT_INJECTION: forcing a failure. [ 3588.841319][T26510] name failslab, interval 1, probability 0, space 0, times 0 [ 3588.857169][T26510] CPU: 0 PID: 26510 Comm: syz-executor.3 Tainted: G D 6.1.29-syzkaller #0 [ 3588.859397][T26510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3588.861809][T26510] Call trace: [ 3588.862686][T26510] dump_backtrace+0x1c8/0x1f4 [ 3588.863744][T26510] show_stack+0x2c/0x3c [ 3588.864772][T26510] dump_stack_lvl+0x108/0x170 [ 3588.865912][T26510] dump_stack+0x1c/0x5c [ 3588.866931][T26510] should_fail_ex+0x408/0x5d4 [ 3588.868033][T26510] __should_failslab+0xc8/0x128 [ 3588.869113][T26510] should_failslab+0x10/0x28 [ 3588.870264][T26510] kmem_cache_alloc+0x8c/0x37c [ 3588.871471][T26510] security_inode_alloc+0x30/0x124 [ 3588.872742][T26510] inode_init_always+0x658/0xac0 [ 3588.873923][T26510] new_inode_pseudo+0x7c/0x1d0 [ 3588.875001][T26510] new_inode+0x38/0x174 [ 3588.875977][T26510] shmem_get_inode+0x2fc/0xb00 [ 3588.877037][T26510] __shmem_file_setup+0x138/0x26c [ 3588.878193][T26510] shmem_kernel_file_setup+0x40/0x54 [ 3588.879442][T26510] newseg+0x3b0/0x914 [ 3588.880353][T26510] ipcget+0x7e4/0xb68 [ 3588.881378][T26510] __arm64_sys_shmget+0x158/0x1d8 [ 3588.882581][T26510] invoke_syscall+0x98/0x2c0 [ 3588.883714][T26510] el0_svc_common+0x138/0x258 [ 3588.884774][T26510] do_el0_svc+0x64/0x218 [ 3588.885758][T26510] el0_svc+0x58/0x168 [ 3588.886653][T26510] el0t_64_sync_handler+0x84/0xf0 [ 3588.887804][T26510] el0t_64_sync+0x18c/0x190 00:59:48 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b4") mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 3) 00:59:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x100000000) (async) mlock2(&(0x7f00008fe000/0x3000)=nil, 0x3000, 0x0) [ 3589.038647][T26517] FAULT_INJECTION: forcing a failure. [ 3589.038647][T26517] name failslab, interval 1, probability 0, space 0, times 0 [ 3589.049220][T26517] CPU: 0 PID: 26517 Comm: syz-executor.5 Tainted: G D 6.1.29-syzkaller #0 [ 3589.051613][T26517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 3589.054137][T26517] Call trace: [ 3589.054959][T26517] dump_backtrace+0x1c8/0x1f4 [ 3589.056097][T26517] show_stack+0x2c/0x3c [ 3589.057205][T26517] dump_stack_lvl+0x108/0x170 [ 3589.058436][T26517] dump_stack+0x1c/0x5c [ 3589.059377][T26517] should_fail_ex+0x408/0x5d4 [ 3589.060407][T26517] __should_failslab+0xc8/0x128 [ 3589.061524][T26517] should_failslab+0x10/0x28 [ 3589.062449][T26517] kmem_cache_alloc+0x8c/0x37c [ 3589.063521][T26517] mas_alloc_nodes+0x228/0x704 [ 3589.064641][T26517] mas_preallocate+0x124/0x2dc [ 3589.065841][T26517] __vma_adjust+0x2d4/0x17a8 [ 3589.066823][T26517] __split_vma+0x330/0x4b4 [ 3589.067933][T26517] split_vma+0xa0/0xf8 [ 3589.068945][T26517] mlock_fixup+0x3c4/0x470 [ 3589.069931][T26517] apply_vma_lock_flags+0x2bc/0x3f8 [ 3589.071110][T26517] do_mlock+0x430/0x590 [ 3589.071990][T26517] __arm64_sys_mlock2+0xb4/0xd8 [ 3589.073085][T26517] invoke_syscall+0x98/0x2c0 [ 3589.074074][T26517] el0_svc_common+0x138/0x258 [ 3589.075058][T26517] do_el0_svc+0x64/0x218 [ 3589.076084][T26517] el0_svc+0x58/0x168 [ 3589.076983][T26517] el0t_64_sync_handler+0x84/0xf0 [ 3589.078160][T26517] el0t_64_sync+0x18c/0x190 [ 3589.564056][T26484] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 3589.565652][T26484] SMP: stopping secondary CPUs [ 3589.566822][T26484] Kernel Offset: disabled [ 3589.567825][T26484] CPU features: 0x00000,02070084,26017203 [ 3589.569083][T26484] Memory Limit: none [ 3590.440151][T26484] Rebooting in 86400 seconds..