Warning: Permanently added '[localhost]:49161' (ECDSA) to the list of known hosts.
2026/01/14 07:45:16 fuzzer started
2026/01/14 07:45:16 dialing manager at localhost:38155
syzkaller login: [   52.269387] cgroup: Unknown subsys name 'net'
[   52.347701] cgroup: Unknown subsys name 'cpuset'
[   52.363516] cgroup: Unknown subsys name 'rlimit'
2026/01/14 07:45:27 syscalls: 203
2026/01/14 07:45:27 code coverage: enabled
2026/01/14 07:45:27 comparison tracing: enabled
2026/01/14 07:45:27 extra coverage: enabled
2026/01/14 07:45:27 setuid sandbox: enabled
2026/01/14 07:45:27 namespace sandbox: enabled
2026/01/14 07:45:27 Android sandbox: enabled
2026/01/14 07:45:27 fault injection: enabled
2026/01/14 07:45:27 leak checking: enabled
2026/01/14 07:45:27 net packet injection: enabled
2026/01/14 07:45:27 net device setup: enabled
2026/01/14 07:45:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/14 07:45:27 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/14 07:45:27 USB emulation: enabled
2026/01/14 07:45:27 hci packet injection: enabled
2026/01/14 07:45:27 wifi device emulation: enabled
2026/01/14 07:45:27 802.15.4 emulation: enabled
2026/01/14 07:45:27 fetching corpus: 0, signal 0/0 (executing program)
2026/01/14 07:45:28 starting 8 fuzzer processes
07:45:28 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
syz_io_uring_setup(0x5c69, &(0x7f0000000040)={0x0, 0x9837, 0x0, 0x71b9b978, 0x32d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = socket(0x21, 0x1, 0x4)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="3bebd7fe6fea7179a399554b0e0154c3", 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0))
r5 = accept(r2, &(0x7f0000000400)=@sco={0x1f, @none}, &(0x7f0000000480)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0))
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000540))
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000006c0)={0x6c, 0x0, &(0x7f0000000680)=[r2, r6]}, 0x2)

07:45:28 executing program 7:
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xcb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a3d5e747ac48897711c0c636919bde0d9d55e58ea4228ebcbc57dd18189c33fc"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e0ccabc150dc287c5be7a9b9304ba474"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008009}, 0x20040001)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000815)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}}, 0x20000041)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x3000c044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}}, 0x4050000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x11)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0)

07:45:28 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9)
r1 = syz_io_uring_complete(0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4)
r2 = io_uring_setup(0x7fce, &(0x7f00000001c0)={0x0, 0x565c, 0x10, 0x1, 0x297, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r2, 0x8000000)
r3 = openat$cgroup_ro(r1, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0xfffeffff)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000002c0)={0xff, "52459f03261cc984aa3b3d6931fce5c12d6390a71da5ba373baee31152ca8c49cabac18da71cb5794b6e4c097003525ef9609bd93eff3ecc459891981cd02d5d"})
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)

07:45:28 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6)

07:45:28 executing program 3:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x400}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x92)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4302}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x353b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x497}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x28200, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000480))
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x188, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x1aa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9971}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdce0}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900))
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4864440}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2a4, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8000}, 0x40050)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000cc0))
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3f)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r3)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf4, r4, 0x204, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef85}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008800}, 0x2400c080)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000f00), 0x101200, 0x0)
ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000f40))
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000051)

07:45:28 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)

[   63.010853] audit: type=1400 audit(1768376728.772:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:45:28 executing program 5:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000380)={0x8, "14c514b3f4f1b3aa88bf62c79aed609c2bf5f5d2d102d26ac74a96d4b79dd8ebd2a67b53758e10bc2782311a650258e2552dda155c1f03a446a97ae08bb09cdd"})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc71a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc081}, 0x20000)
socketpair(0x28, 0x2, 0x0, &(0x7f00000005c0)={<r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbee}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x2004000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x7f, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x8801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', <r9=>0x0})
r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x68}}, 0x4000081)

07:45:28 executing program 6:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x95)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x29, 0x1, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x1)
write$rfkill(r0, &(0x7f0000000440)={0xfffffffe, 0x3, 0x2, 0x1, 0x1}, 0x8)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x200040c0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan4\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000000740), 0x20, 0x80)
write$rfkill(r6, &(0x7f0000000780)={0x8, 0x6, 0x2, 0x1}, 0x8)
accept4$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000840)='cgroup.kill\x00', 0x0, 0x0)
read$hidraw(r7, &(0x7f0000000880)=""/170, 0xaa)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)

[   64.200225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.203679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.214474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.216647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.218445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.220652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.225002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.226247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.229550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.230789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.253687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.257324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.262398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.271006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   64.274842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   64.277038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.278559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   64.279823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   64.282755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   64.284343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   64.286533] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.287745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   64.289719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   64.296858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   64.298835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   64.301722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   64.302880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   64.307391] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   64.313274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   64.315459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   64.324738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   64.325987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   64.327860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   64.329091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   64.331686] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   64.331963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   64.335860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   64.344963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   64.350654] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   64.353837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   66.352531] Bluetooth: hci3: command tx timeout
[   66.352629] Bluetooth: hci6: command tx timeout
[   66.353811] Bluetooth: hci0: command tx timeout
[   66.353942] Bluetooth: hci2: command tx timeout
[   66.354365] Bluetooth: hci1: command tx timeout
[   66.415392] Bluetooth: hci5: command tx timeout
[   66.417185] Bluetooth: hci4: command tx timeout
[   66.417704] Bluetooth: hci7: command tx timeout
[   68.399237] Bluetooth: hci6: command tx timeout
[   68.399710] Bluetooth: hci0: command tx timeout
[   68.400102] Bluetooth: hci2: command tx timeout
[   68.400759] Bluetooth: hci1: command tx timeout
[   68.401596] Bluetooth: hci3: command tx timeout
[   68.463258] Bluetooth: hci7: command tx timeout
[   68.463311] Bluetooth: hci4: command tx timeout
[   68.463731] Bluetooth: hci5: command tx timeout
[   70.448194] Bluetooth: hci2: command tx timeout
[   70.448961] Bluetooth: hci1: command tx timeout
[   70.449840] Bluetooth: hci3: command tx timeout
[   70.449871] Bluetooth: hci0: command tx timeout
[   70.450648] Bluetooth: hci6: command tx timeout
[   70.511231] Bluetooth: hci5: command tx timeout
[   70.513063] Bluetooth: hci4: command tx timeout
[   70.513841] Bluetooth: hci7: command tx timeout
[   72.495197] Bluetooth: hci1: command tx timeout
[   72.495644] Bluetooth: hci3: command tx timeout
[   72.496022] Bluetooth: hci6: command tx timeout
[   72.497348] Bluetooth: hci0: command tx timeout
[   72.497744] Bluetooth: hci2: command tx timeout
[   72.559184] Bluetooth: hci4: command tx timeout
[   72.559586] Bluetooth: hci7: command tx timeout
[   72.559964] Bluetooth: hci5: command tx timeout
[  100.390258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.390891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.566684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.567328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.684459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.685075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.841160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.841787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.940872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.941487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.063208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.063828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.163752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.164382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.237587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.238190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:46:07 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6)

[  101.416433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.417025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.455168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.455762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:46:07 executing program 6:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x95)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x29, 0x1, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x1)
write$rfkill(r0, &(0x7f0000000440)={0xfffffffe, 0x3, 0x2, 0x1, 0x1}, 0x8)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x200040c0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan4\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000000740), 0x20, 0x80)
write$rfkill(r6, &(0x7f0000000780)={0x8, 0x6, 0x2, 0x1}, 0x8)
accept4$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000840)='cgroup.kill\x00', 0x0, 0x0)
read$hidraw(r7, &(0x7f0000000880)=""/170, 0xaa)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)

07:46:07 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6)

07:46:07 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)

[  101.517674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.519095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:46:07 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6)

07:46:07 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:46:07 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)

[  101.667315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.667909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:46:07 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

[  101.755679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.756274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.833605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.834248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.889805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.890491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.933610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.935035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:46:18 executing program 6:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x95)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x29, 0x1, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x1)
write$rfkill(r0, &(0x7f0000000440)={0xfffffffe, 0x3, 0x2, 0x1, 0x1}, 0x8)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x200040c0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan4\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000000740), 0x20, 0x80)
write$rfkill(r6, &(0x7f0000000780)={0x8, 0x6, 0x2, 0x1}, 0x8)
accept4$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000840)='cgroup.kill\x00', 0x0, 0x0)
read$hidraw(r7, &(0x7f0000000880)=""/170, 0xaa)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)

07:46:18 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

07:46:18 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)

07:46:18 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9)
r1 = syz_io_uring_complete(0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4)
r2 = io_uring_setup(0x7fce, &(0x7f00000001c0)={0x0, 0x565c, 0x10, 0x1, 0x297, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r2, 0x8000000)
r3 = openat$cgroup_ro(r1, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0xfffeffff)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000002c0)={0xff, "52459f03261cc984aa3b3d6931fce5c12d6390a71da5ba373baee31152ca8c49cabac18da71cb5794b6e4c097003525ef9609bd93eff3ecc459891981cd02d5d"})
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)

07:46:18 executing program 3:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x400}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x92)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4302}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x353b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x497}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x28200, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000480))
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x188, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x1aa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9971}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdce0}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900))
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4864440}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2a4, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8000}, 0x40050)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000cc0))
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3f)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r3)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf4, r4, 0x204, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef85}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008800}, 0x2400c080)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000f00), 0x101200, 0x0)
ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000f40))
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000051)

07:46:18 executing program 7:
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xcb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a3d5e747ac48897711c0c636919bde0d9d55e58ea4228ebcbc57dd18189c33fc"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e0ccabc150dc287c5be7a9b9304ba474"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008009}, 0x20040001)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000815)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}}, 0x20000041)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x3000c044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}}, 0x4050000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x11)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0)

07:46:18 executing program 5:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000380)={0x8, "14c514b3f4f1b3aa88bf62c79aed609c2bf5f5d2d102d26ac74a96d4b79dd8ebd2a67b53758e10bc2782311a650258e2552dda155c1f03a446a97ae08bb09cdd"})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc71a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc081}, 0x20000)
socketpair(0x28, 0x2, 0x0, &(0x7f00000005c0)={<r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbee}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x2004000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x7f, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x8801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', <r9=>0x0})
r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x68}}, 0x4000081)

07:46:18 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
syz_io_uring_setup(0x5c69, &(0x7f0000000040)={0x0, 0x9837, 0x0, 0x71b9b978, 0x32d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = socket(0x21, 0x1, 0x4)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="3bebd7fe6fea7179a399554b0e0154c3", 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0))
r5 = accept(r2, &(0x7f0000000400)=@sco={0x1f, @none}, &(0x7f0000000480)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0))
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000540))
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000006c0)={0x6c, 0x0, &(0x7f0000000680)=[r2, r6]}, 0x2)

07:46:18 executing program 7:
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xcb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a3d5e747ac48897711c0c636919bde0d9d55e58ea4228ebcbc57dd18189c33fc"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e0ccabc150dc287c5be7a9b9304ba474"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008009}, 0x20040001)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000815)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}}, 0x20000041)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x3000c044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}}, 0x4050000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x11)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0)

07:46:18 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9)
r1 = syz_io_uring_complete(0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4)
r2 = io_uring_setup(0x7fce, &(0x7f00000001c0)={0x0, 0x565c, 0x10, 0x1, 0x297, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r2, 0x8000000)
r3 = openat$cgroup_ro(r1, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0xfffeffff)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000002c0)={0xff, "52459f03261cc984aa3b3d6931fce5c12d6390a71da5ba373baee31152ca8c49cabac18da71cb5794b6e4c097003525ef9609bd93eff3ecc459891981cd02d5d"})
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)

07:46:18 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)

07:46:18 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

[  112.536961] 
[  112.537226] =====================================
[  112.537771] WARNING: bad unlock balance detected!
[  112.538340] 6.19.0-rc5-next-20260113 #1 Not tainted
[  112.538919] -------------------------------------
[  112.539473] syz-executor.7/278 is trying to release lock (rcu_read_lock) at:
[  112.540767] [<ffffffff81c20365>] __wait_on_freeing_inode+0x105/0x350
[  112.542231] but there are no more locks to release!
[  112.543603] 
[  112.543603] other info that might help us debug this:
[  112.545153] 4 locks held by syz-executor.7/278:
[  112.546236]  #0: ffff88800f9f43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  112.548160]  #1: ffff88801ae296f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  112.550077]  #2: ffff88800fa00950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  112.551790]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  112.553555] 
[  112.553555] stack backtrace:
[  112.554132] CPU: 1 UID: 0 PID: 278 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  112.554154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  112.554163] Call Trace:
[  112.554169]  <TASK>
[  112.554175]  dump_stack_lvl+0xca/0x120
[  112.554213]  ? __wait_on_freeing_inode+0x105/0x350
[  112.554235]  print_unlock_imbalance_bug+0x118/0x130
[  112.554256]  ? __wait_on_freeing_inode+0x105/0x350
[  112.554277]  lock_release+0x1ee/0x270
[  112.554298]  __wait_on_freeing_inode+0x10a/0x350
[  112.554320]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  112.554342]  ? __pfx_var_wake_function+0x10/0x10
[  112.554368]  ? lock_is_held_type+0x9e/0x120
[  112.554384]  insert_inode_locked+0x25f/0x890
[  112.554408]  __ext4_new_inode+0x223d/0x4cd0
[  112.554433]  ? __pfx___ext4_new_inode+0x10/0x10
[  112.554453]  ? __pfx_avc_has_perm+0x10/0x10
[  112.554473]  ? __pfx___dquot_initialize+0x10/0x10
[  112.554503]  ext4_mkdir+0x331/0xb30
[  112.554529]  ? __pfx_ext4_mkdir+0x10/0x10
[  112.554552]  ? security_inode_permission+0x72/0xe0
[  112.554571]  vfs_mkdir+0x6d8/0xc00
[  112.554595]  do_mkdirat+0x11a/0x440
[  112.554613]  ? __pfx_do_mkdirat+0x10/0x10
[  112.554631]  ? strncpy_from_user+0x21b/0x2f0
[  112.554656]  __x64_sys_mkdir+0x65/0x80
[  112.554674]  do_syscall_64+0xbf/0x420
[  112.554692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.554709] RIP: 0033:0x7ff257c52c27
[  112.554722] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  112.554737] RSP: 002b:00007ffd0f9646e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[  112.554753] RAX: ffffffffffffffda RBX: 00007ffd0f964770 RCX: 00007ff257c52c27
[  112.554764] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd0f964770
[  112.554774] RBP: 00007ffd0f96474c R08: 0000000000000000 R09: 0000000000000003
[  112.554783] R10: 00007ffd0f964487 R11: 0000000000000206 R12: 0000000000000032
[  112.554793] R13: 000000000001b65a R14: 0000000000000014 R15: 00007ffd0f9647b0
[  112.554808]  </TASK>
[  112.575940] ------------[ cut here ]------------
[  112.598290] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.7/278
[  112.622296] Modules linked in:
[  112.622699] CPU: 1 UID: 0 PID: 278 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  112.650649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  112.670291] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  112.670893] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9
[  112.693623] RSP: 0018:ffff88801b3df9e0 EFLAGS: 00010286
[  112.718669] RAX: 00000000ffffffff RBX: ffff888016c73700 RCX: ffffffff815664c7
[  112.737786] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff888016c73afc
[  112.738983] RBP: ffff888016c73700 R08: 0000000000000000 R09: fffffbfff0ba6ff4
[  112.740097] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016c73700
[  112.741247] R13: 0000000000000001 R14: ffffffff85c10490 R15: ffff88801fc0bc48
[  112.742347] FS:  0000555576b43400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  112.743573] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.744502] CR2: 000055bd30b334c8 CR3: 000000001e047000 CR4: 0000000000350ef0
[  112.745596] Call Trace:
[  112.746032]  <TASK>
[  112.747323]  __wait_on_freeing_inode+0x10f/0x350
[  112.748602]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  112.750571]  ? __pfx_var_wake_function+0x10/0x10
[  112.752811]  ? lock_is_held_type+0x9e/0x120
[  112.754819]  insert_inode_locked+0x25f/0x890
[  112.757784]  __ext4_new_inode+0x223d/0x4cd0
[  112.762280]  ? __pfx___ext4_new_inode+0x10/0x10
[  112.763949]  ? __pfx_avc_has_perm+0x10/0x10
[  112.765097]  ? __pfx___dquot_initialize+0x10/0x10
[  112.769078]  ext4_mkdir+0x331/0xb30
[  112.772639]  ? __pfx_ext4_mkdir+0x10/0x10
[  112.773763]  ? security_inode_permission+0x72/0xe0
[  112.776715]  vfs_mkdir+0x6d8/0xc00
[  112.779224]  do_mkdirat+0x11a/0x440
[  112.780963]  ? __pfx_do_mkdirat+0x10/0x10
[  112.782304]  ? strncpy_from_user+0x21b/0x2f0
[  112.788003]  __x64_sys_mkdir+0x65/0x80
[  112.790651]  do_syscall_64+0xbf/0x420
[  112.792099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.793088] RIP: 0033:0x7ff257c52c27
[  112.793820] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  112.796494] RSP: 002b:00007ffd0f9646e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[  112.797663] RAX: ffffffffffffffda RBX: 00007ffd0f964770 RCX: 00007ff257c52c27
[  112.798760] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd0f964770
[  112.799852] RBP: 00007ffd0f96474c R08: 0000000000000000 R09: 0000000000000003
[  112.800953] R10: 00007ffd0f964487 R11: 0000000000000206 R12: 0000000000000032
[  112.802055] R13: 000000000001b65a R14: 0000000000000014 R15: 00007ffd0f9647b0
[  112.806776]  </TASK>
[  112.807202] irq event stamp: 176497
[  112.807723] hardirqs last  enabled at (176497): [<ffffffff84d14a2c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  112.809285] hardirqs last disabled at (176496): [<ffffffff84d14783>] _raw_spin_lock_irqsave+0x53/0x60
[  112.810791] softirqs last  enabled at (176492): [<ffffffff812cdb99>] kernel_fpu_end+0x59/0x70
[  112.812218] softirqs last disabled at (176490): [<ffffffff812cea6b>] kernel_fpu_begin_mask+0x1bb/0x300
[  112.813728] ---[ end trace 0000000000000000 ]---
[  112.859079] rfkill: input handler enabled
07:46:18 executing program 5:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000380)={0x8, "14c514b3f4f1b3aa88bf62c79aed609c2bf5f5d2d102d26ac74a96d4b79dd8ebd2a67b53758e10bc2782311a650258e2552dda155c1f03a446a97ae08bb09cdd"})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc71a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc081}, 0x20000)
socketpair(0x28, 0x2, 0x0, &(0x7f00000005c0)={<r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbee}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x2004000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x7f, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x8801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', <r9=>0x0})
r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x68}}, 0x4000081)

07:46:18 executing program 3:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x400}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x92)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4302}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x353b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x497}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x28200, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000480))
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x188, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x1aa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9971}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdce0}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900))
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4864440}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2a4, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8000}, 0x40050)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000cc0))
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3f)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r3)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf4, r4, 0x204, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef85}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008800}, 0x2400c080)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000f00), 0x101200, 0x0)
ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000f40))
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000051)

07:46:18 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
syz_io_uring_setup(0x5c69, &(0x7f0000000040)={0x0, 0x9837, 0x0, 0x71b9b978, 0x32d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = socket(0x21, 0x1, 0x4)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="3bebd7fe6fea7179a399554b0e0154c3", 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0))
r5 = accept(r2, &(0x7f0000000400)=@sco={0x1f, @none}, &(0x7f0000000480)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0))
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000540))
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000006c0)={0x6c, 0x0, &(0x7f0000000680)=[r2, r6]}, 0x2)

07:46:26 executing program 3:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x400}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x92)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4302}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x353b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x497}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x28200, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000480))
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x188, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x1aa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9971}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdce0}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900))
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4864440}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2a4, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8000}, 0x40050)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000cc0))
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3f)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r3)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf4, r4, 0x204, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef85}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008800}, 0x2400c080)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000f00), 0x101200, 0x0)
ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000f40))
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000051)

07:46:26 executing program 6:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x95)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x29, 0x1, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x1)
write$rfkill(r0, &(0x7f0000000440)={0xfffffffe, 0x3, 0x2, 0x1, 0x1}, 0x8)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x200040c0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan4\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000000740), 0x20, 0x80)
write$rfkill(r6, &(0x7f0000000780)={0x8, 0x6, 0x2, 0x1}, 0x8)
accept4$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000840)='cgroup.kill\x00', 0x0, 0x0)
read$hidraw(r7, &(0x7f0000000880)=""/170, 0xaa)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)

07:46:26 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9)
r1 = syz_io_uring_complete(0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4)
r2 = io_uring_setup(0x7fce, &(0x7f00000001c0)={0x0, 0x565c, 0x10, 0x1, 0x297, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r2, 0x8000000)
r3 = openat$cgroup_ro(r1, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0xfffeffff)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000002c0)={0xff, "52459f03261cc984aa3b3d6931fce5c12d6390a71da5ba373baee31152ca8c49cabac18da71cb5794b6e4c097003525ef9609bd93eff3ecc459891981cd02d5d"})
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)

07:46:26 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)

07:46:26 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:46:26 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
syz_io_uring_setup(0x5c69, &(0x7f0000000040)={0x0, 0x9837, 0x0, 0x71b9b978, 0x32d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = socket(0x21, 0x1, 0x4)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="3bebd7fe6fea7179a399554b0e0154c3", 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0))
r5 = accept(r2, &(0x7f0000000400)=@sco={0x1f, @none}, &(0x7f0000000480)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0))
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000540))
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000006c0)={0x6c, 0x0, &(0x7f0000000680)=[r2, r6]}, 0x2)

07:46:26 executing program 5:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000380)={0x8, "14c514b3f4f1b3aa88bf62c79aed609c2bf5f5d2d102d26ac74a96d4b79dd8ebd2a67b53758e10bc2782311a650258e2552dda155c1f03a446a97ae08bb09cdd"})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc71a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc081}, 0x20000)
socketpair(0x28, 0x2, 0x0, &(0x7f00000005c0)={<r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbee}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x2004000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x7f, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x8801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', <r9=>0x0})
r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x68}}, 0x4000081)

07:46:26 executing program 7:
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xcb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a3d5e747ac48897711c0c636919bde0d9d55e58ea4228ebcbc57dd18189c33fc"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e0ccabc150dc287c5be7a9b9304ba474"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008009}, 0x20040001)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000815)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}}, 0x20000041)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x3000c044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}}, 0x4050000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x11)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0)

[  120.624748] rfkill: input handler disabled
07:46:26 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x100)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040))
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ef)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa11c8a20c547a409, 0xe45fd3cc3cc26610, r1, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000140)="869be09b61cb84bd42f2a931a098274451bfa9cfd5b5ce40409dfcc5c3314c2f2d0303edf43bff2b1c33abcf3735546ad372f9d6f8cf6b0aa843df1fa17a34c90e517640d47325372ac38779c3ee4b623431fb63c2328b6abb40aeeb165bc5ae7c38f1f5dd0a934408e9e1beecbb71aee52b2a3d5ded16277a23e315aa2f9052891cb9326ea61c77e178441082160238c4b53e7b6e53b3827519929c5d85ad07155b131140ae7c", 0xa7, 0x51, 0x0, {0x0, r3}}, 0x4936)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7f, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r0, r4, r1, r1, r5, r0]}, 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x325a, &(0x7f0000000380)={0x0, 0xb19a, 0x20, 0x3, 0x39c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x7ff, 0x0, &(0x7f0000000480)=[r6, r7, r5, r0, r4, r1, r8]}, 0x7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20004040)

07:46:26 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9)
r1 = syz_io_uring_complete(0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4)
r2 = io_uring_setup(0x7fce, &(0x7f00000001c0)={0x0, 0x565c, 0x10, 0x1, 0x297, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r2, 0x8000000)
r3 = openat$cgroup_ro(r1, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0xfffeffff)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000002c0)={0xff, "52459f03261cc984aa3b3d6931fce5c12d6390a71da5ba373baee31152ca8c49cabac18da71cb5794b6e4c097003525ef9609bd93eff3ecc459891981cd02d5d"})
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)

07:46:26 executing program 5:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000380)={0x8, "14c514b3f4f1b3aa88bf62c79aed609c2bf5f5d2d102d26ac74a96d4b79dd8ebd2a67b53758e10bc2782311a650258e2552dda155c1f03a446a97ae08bb09cdd"})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc71a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc081}, 0x20000)
socketpair(0x28, 0x2, 0x0, &(0x7f00000005c0)={<r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbee}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x2004000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x7f, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x8801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)

07:46:26 executing program 7:
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xcb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a3d5e747ac48897711c0c636919bde0d9d55e58ea4228ebcbc57dd18189c33fc"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e0ccabc150dc287c5be7a9b9304ba474"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008009}, 0x20040001)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000815)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}}, 0x20000041)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x3000c044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}}, 0x4050000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0)

07:46:26 executing program 2:
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'vlan0', 0x32, 0x38}, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0))
r2 = socket(0x15, 0x6, 0xffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="b19dfcfb79aeed8652051cc3394034a6", 0x10)
r3 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)="4d16448e7151bf06ff007e701f8bdf836c93424a564b0bdf78e2bc5d16", 0x1d)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x10200000, 0x900)
r5 = io_uring_setup(0x2f49, &(0x7f0000000280)={0x0, 0x25efe617, 0x20, 0x0, 0x149, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3, r1, r0, r3, r2, r1, r3, r0, r5], 0x9)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)={0x35d, "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"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000740))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000780))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

[  120.758390] rfkill: input handler enabled
07:46:26 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
syz_io_uring_setup(0x5c69, &(0x7f0000000040)={0x0, 0x9837, 0x0, 0x71b9b978, 0x32d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = socket(0x21, 0x1, 0x4)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="3bebd7fe6fea7179a399554b0e0154c3", 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0))
r5 = accept(r2, &(0x7f0000000400)=@sco={0x1f, @none}, &(0x7f0000000480)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0))
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000540))


VM DIAGNOSIS:
07:46:18  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88806ce31f50 RBP=ffff88806ce08a48 RSP=ffff88806ce08978
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003d1bb R11=00000000000c7b65
R12=0000000000000000 R13=ffff88806ce08a38 R14=ffff88801b5e0000 R15=ffff88806ce089f0
RIP=ffffffff8135f672 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555564a1a400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d027000 CR3=000000000c8b2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88801b3df4c8
R8 =0000000000000000 R9 =ffffed1001688046 R10=0000000000000036 R11=666666203a332320
R12=0000000000000036 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30
RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555576b43400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bd30b334c8 CR3=000000001e047000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000