Warning: Permanently added '[localhost]:36284' (ECDSA) to the list of known hosts. 2022/10/02 13:44:25 fuzzer started 2022/10/02 13:44:26 dialing manager at localhost:35095 syzkaller login: [ 36.634106] cgroup: Unknown subsys name 'net' [ 36.758288] cgroup: Unknown subsys name 'rlimit' 2022/10/02 13:44:41 syscalls: 202 2022/10/02 13:44:41 code coverage: enabled 2022/10/02 13:44:41 comparison tracing: enabled 2022/10/02 13:44:41 extra coverage: enabled 2022/10/02 13:44:41 setuid sandbox: enabled 2022/10/02 13:44:41 namespace sandbox: enabled 2022/10/02 13:44:41 Android sandbox: enabled 2022/10/02 13:44:41 fault injection: enabled 2022/10/02 13:44:41 leak checking: enabled 2022/10/02 13:44:41 net packet injection: enabled 2022/10/02 13:44:41 net device setup: enabled 2022/10/02 13:44:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 13:44:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 13:44:41 USB emulation: enabled 2022/10/02 13:44:41 hci packet injection: enabled 2022/10/02 13:44:41 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 13:44:41 802.15.4 emulation: enabled 2022/10/02 13:44:41 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 13:44:42 starting 8 fuzzer processes 13:44:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x20040000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) 13:44:42 executing program 5: r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000000), 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/44, 0x2c}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x3, 0xffffffffffffffff, 0x0, r1, 0xee00, 0x48, 0x40}, 0x3252, 0x1, 0x3, 0x5, 0x0, r0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r2) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000001300)={&(0x7f0000001200)=""/205, 0xcd}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) process_vm_writev(r3, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f0000001440)=""/8, 0x8}], 0x2, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r3, &(0x7f0000003a80)=[{&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/100, 0x64}, {&(0x7f0000003840)=""/119, 0x77}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003e80)={'erspan0\x00', &(0x7f0000003d40)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x1f, 0xef5, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x8, [{@multicast2, 0x2}, {@remote, 0x5c}, {@multicast2, 0x600}]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x5e, 0x3, [{0x1, 0x7, "e8c92dc3b8"}, {0x5, 0x10, "aef521331fa4eb0badb2eeca4e07"}, {0x2, 0x11, "fe536105858b00e31a1898e34a4885"}, {0x2, 0xd, "71a6e437a1936fc052b4b6"}, {0x6, 0x6, "00644c9b"}, {0x5, 0x3, "14"}, {0x2, 0xe, "a76f5e92a325c3cf4ec458e1"}, {0x1, 0x4, "d7a3"}, {0x0, 0x8, "e1bd2d5c4361"}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010102}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffff7}, {@multicast2, 0x80}, {@multicast2, 0x4}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3f}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x5, [{@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@loopback, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r4, 0x10000000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000003f00)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000003ec0), 0x0, 0x0, 0x800}, 0x6) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/231, 0xe7}], 0x1, &(0x7f0000004100)=[{&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/38, 0x26}], 0x2, 0x0) r7 = getpgid(r0) process_vm_readv(r7, &(0x7f0000005340)=[{&(0x7f0000004140)=""/9, 0x9}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/202, 0xca}, {&(0x7f0000004300)=""/43, 0x2b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f0000007580)=[{&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/30, 0x1e}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/112, 0x70}, {&(0x7f0000007540)=""/31, 0x1f}], 0x7, 0x0) 13:44:42 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0xce8d) r0 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0x5, &(0x7f0000000080)) futex(&(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x5]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sched_rr_get_interval(r2, &(0x7f0000000340)) futex(&(0x7f0000000380)=0x2, 0x8, 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) sched_rr_get_interval(r2, &(0x7f0000000440)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000480)) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000540)='id_resolver\x00', &(0x7f0000000600)=@keyring={'key_or_keyring:', r4}) sched_setattr(r0, &(0x7f0000000640)={0x38, 0x5, 0x0, 0x6, 0xfffff001, 0xf80, 0x20, 0x200, 0x5, 0x1}, 0x0) epoll_pwait2(r1, &(0x7f0000000680)=[{}, {}, {}], 0x3, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x2c53]}, 0x8) keyctl$revoke(0x3, r4) 13:44:42 executing program 4: r0 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) r1 = syz_io_uring_setup(0x149, &(0x7f0000000040)={0x0, 0xd130, 0x4, 0x3, 0x42}, &(0x7f0000800000/0x800000)=nil, &(0x7f000092d000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xffff8000, &(0x7f00000001c0)={[0x800]}, 0x8) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480), 0x0, 0x0) r4 = syz_io_uring_setup(0x4962, &(0x7f00000004c0)={0x0, 0xe19b, 0x4, 0x0, 0x320, 0x0, r1}, &(0x7f0000e7a000/0x3000)=nil, &(0x7f000092a000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, r3, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="53663f54836ea290b8febad45ecd40a1fff4f01376e9b0c55ea7b6ad7a9aafd974b1964a47f8dc8f66264fa0737a9d4b4887562783f1d55276951df3c290a36e8511e31467bad2ae17f42d92fc4d073bd487579fbdcd0f17fee1e051a4eccf96d2ca5a52f710503775006ab202e210d53cc883feac65db39641200f333c6f72d6002cb85097a370be934419d9df4", 0x8e}, {&(0x7f0000000680)="31d9cb9b9bddca4892950b68c332779d4e75f611f8dcb50716ed75c8fb08b8c0944e3f65bbb921c704443940a3c6662a6fae0f2f7ab4798bbcc3bb1c93e3c84c", 0x40}, {&(0x7f00000006c0)="af5cb4ee1e7a8ec023c509cf0f749be24411cd2af738baaf27d6320b3aa540ff557762b8e09af1f0a701493753d723d20ad4b83cd5413f5ecd995c8c38086458db05", 0x42}, {&(0x7f0000000740)="cb72064394d54df147ed07dc6f0939ede1ed37deb287170420630b3f6c47981589916f45075dca9ddd8a943c1fcd15eb050db1355cdca798d1a3dde4de5059daef23de8ada", 0x45}], 0x4, 0x11, 0x1, {0x2}}, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2808c2, 0x0) r7 = getpgid(0x0) r8 = syz_io_uring_setup(0x6d9c, &(0x7f0000000880)={0x0, 0xb234, 0x20, 0x2, 0x3b7, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000099e000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000980)={r0, r8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000009c0)) epoll_wait(r8, &(0x7f0000000a00)=[{}, {}, {}], 0x3, 0x0) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, 0x0, r9, 0xee01) r10 = epoll_create(0x8) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) epoll_pwait2(r10, &(0x7f0000000a80)=[{}, {}], 0x2, &(0x7f0000000b00)={r11, r12+60000000}, &(0x7f0000000b40), 0x8) 13:44:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r9) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) [ 52.583848] audit: type=1400 audit(1664718282.652:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:44:42 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r11, r12, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) prlimit64(r3, 0x2, 0x0, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000700)='nomand\x00', 0x0, 0x0) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r13) 13:44:42 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) fstat(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {r8, r9}}, './file0\x00'}) 13:44:42 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x0) clock_gettime(0x6, &(0x7f0000000100)) clock_gettime(0x4, &(0x7f0000000140)) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x20]}, 0x8) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x6, &(0x7f0000000280)={0xfffffffffffffa53, 0xe000000000000000}, &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x1) epoll_pwait2(r0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xffffffff80000001]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, 0xee00, r2, 0xffffffffffffffff, 0x0, 0x22, 0x7ff}, 0x1, 0xfffffffffffffffe, 0x8, 0x3, r1, r1, 0x6}) clock_gettime(0x0, &(0x7f0000000500)) futex(&(0x7f0000000540)=0x2, 0xb, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000800)={0x0, "c578fab5d364bc2f93cdc280c041cad787f09d9cea68206372904058879d5ca2170ecb7f747f61bf79f21a999081a85f687607f87f03babab833ea1580533da6", 0x19}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000880)='cifs.idmap\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f00000008c0)=""/141, 0x8d) [ 53.807050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.809769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.817905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.820819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.822766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.830916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.837932] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.861277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.864667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.867175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.871053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.874658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.878137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.883566] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.928356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.946798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.948861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.950872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.952406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.953807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.955107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.956531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.957802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.959598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.963753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.966164] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 53.967333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.971667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.972688] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.973468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 53.975861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.977456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.978200] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.978735] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 53.980901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.982077] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.982453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 53.984924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.989515] Bluetooth: hci7: HCI_REQ-0x0c1a [ 54.000688] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.001431] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.036091] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.057597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.060199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.064157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.065990] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.067248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.069608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.073293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.074683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.076600] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.078037] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.079425] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.081833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.094507] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.095568] Bluetooth: hci6: HCI_REQ-0x0c1a [ 55.895110] Bluetooth: hci1: command 0x0409 tx timeout [ 55.895125] Bluetooth: hci0: command 0x0409 tx timeout [ 56.022711] Bluetooth: hci2: command 0x0409 tx timeout [ 56.022732] Bluetooth: hci3: command 0x0409 tx timeout [ 56.086734] Bluetooth: hci4: command 0x0409 tx timeout [ 56.087342] Bluetooth: hci7: command 0x0409 tx timeout [ 56.150709] Bluetooth: hci6: command 0x0409 tx timeout [ 56.151279] Bluetooth: hci5: command 0x0409 tx timeout [ 57.942736] Bluetooth: hci0: command 0x041b tx timeout [ 57.943514] Bluetooth: hci1: command 0x041b tx timeout [ 58.070810] Bluetooth: hci2: command 0x041b tx timeout [ 58.071579] Bluetooth: hci3: command 0x041b tx timeout [ 58.134802] Bluetooth: hci7: command 0x041b tx timeout [ 58.135545] Bluetooth: hci4: command 0x041b tx timeout [ 58.198721] Bluetooth: hci5: command 0x041b tx timeout [ 58.199455] Bluetooth: hci6: command 0x041b tx timeout [ 59.990745] Bluetooth: hci1: command 0x040f tx timeout [ 59.991534] Bluetooth: hci0: command 0x040f tx timeout [ 60.118798] Bluetooth: hci3: command 0x040f tx timeout [ 60.119588] Bluetooth: hci2: command 0x040f tx timeout [ 60.182882] Bluetooth: hci4: command 0x040f tx timeout [ 60.184399] Bluetooth: hci7: command 0x040f tx timeout [ 60.246779] Bluetooth: hci6: command 0x040f tx timeout [ 60.247541] Bluetooth: hci5: command 0x040f tx timeout [ 62.038744] Bluetooth: hci0: command 0x0419 tx timeout [ 62.039562] Bluetooth: hci1: command 0x0419 tx timeout [ 62.166734] Bluetooth: hci2: command 0x0419 tx timeout [ 62.167529] Bluetooth: hci3: command 0x0419 tx timeout [ 62.230833] Bluetooth: hci7: command 0x0419 tx timeout [ 62.231661] Bluetooth: hci4: command 0x0419 tx timeout [ 62.294727] Bluetooth: hci5: command 0x0419 tx timeout [ 62.295520] Bluetooth: hci6: command 0x0419 tx timeout [ 117.078867] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 119.281945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.285287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.288462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.292189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.295966] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.297563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.302540] Bluetooth: hci5: HCI_REQ-0x0c1a [ 121.366736] Bluetooth: hci5: command 0x0409 tx timeout [ 123.414677] Bluetooth: hci5: command 0x041b tx timeout [ 125.462697] Bluetooth: hci5: command 0x040f tx timeout [ 127.510697] Bluetooth: hci5: command 0x0419 tx timeout 13:46:23 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) fstat(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {r8, r9}}, './file0\x00'}) 13:46:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x20040000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) 13:46:23 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x0) clock_gettime(0x6, &(0x7f0000000100)) clock_gettime(0x4, &(0x7f0000000140)) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x20]}, 0x8) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x6, &(0x7f0000000280)={0xfffffffffffffa53, 0xe000000000000000}, &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x1) epoll_pwait2(r0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xffffffff80000001]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, 0xee00, r2, 0xffffffffffffffff, 0x0, 0x22, 0x7ff}, 0x1, 0xfffffffffffffffe, 0x8, 0x3, r1, r1, 0x6}) clock_gettime(0x0, &(0x7f0000000500)) futex(&(0x7f0000000540)=0x2, 0xb, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000800)={0x0, "c578fab5d364bc2f93cdc280c041cad787f09d9cea68206372904058879d5ca2170ecb7f747f61bf79f21a999081a85f687607f87f03babab833ea1580533da6", 0x19}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000880)='cifs.idmap\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f00000008c0)=""/141, 0x8d) 13:46:23 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r11, r12, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) prlimit64(r3, 0x2, 0x0, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000700)='nomand\x00', 0x0, 0x0) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r13) 13:46:23 executing program 4: r0 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) r1 = syz_io_uring_setup(0x149, &(0x7f0000000040)={0x0, 0xd130, 0x4, 0x3, 0x42}, &(0x7f0000800000/0x800000)=nil, &(0x7f000092d000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xffff8000, &(0x7f00000001c0)={[0x800]}, 0x8) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480), 0x0, 0x0) r4 = syz_io_uring_setup(0x4962, &(0x7f00000004c0)={0x0, 0xe19b, 0x4, 0x0, 0x320, 0x0, r1}, &(0x7f0000e7a000/0x3000)=nil, &(0x7f000092a000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, r3, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="53663f54836ea290b8febad45ecd40a1fff4f01376e9b0c55ea7b6ad7a9aafd974b1964a47f8dc8f66264fa0737a9d4b4887562783f1d55276951df3c290a36e8511e31467bad2ae17f42d92fc4d073bd487579fbdcd0f17fee1e051a4eccf96d2ca5a52f710503775006ab202e210d53cc883feac65db39641200f333c6f72d6002cb85097a370be934419d9df4", 0x8e}, {&(0x7f0000000680)="31d9cb9b9bddca4892950b68c332779d4e75f611f8dcb50716ed75c8fb08b8c0944e3f65bbb921c704443940a3c6662a6fae0f2f7ab4798bbcc3bb1c93e3c84c", 0x40}, {&(0x7f00000006c0)="af5cb4ee1e7a8ec023c509cf0f749be24411cd2af738baaf27d6320b3aa540ff557762b8e09af1f0a701493753d723d20ad4b83cd5413f5ecd995c8c38086458db05", 0x42}, {&(0x7f0000000740)="cb72064394d54df147ed07dc6f0939ede1ed37deb287170420630b3f6c47981589916f45075dca9ddd8a943c1fcd15eb050db1355cdca798d1a3dde4de5059daef23de8ada", 0x45}], 0x4, 0x11, 0x1, {0x2}}, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2808c2, 0x0) r7 = getpgid(0x0) r8 = syz_io_uring_setup(0x6d9c, &(0x7f0000000880)={0x0, 0xb234, 0x20, 0x2, 0x3b7, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000099e000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000980)={r0, r8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000009c0)) epoll_wait(r8, &(0x7f0000000a00)=[{}, {}, {}], 0x3, 0x0) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, 0x0, r9, 0xee01) r10 = epoll_create(0x8) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) epoll_pwait2(r10, &(0x7f0000000a80)=[{}, {}], 0x2, &(0x7f0000000b00)={r11, r12+60000000}, &(0x7f0000000b40), 0x8) 13:46:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r9) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:23 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0xce8d) r0 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0x5, &(0x7f0000000080)) futex(&(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x5]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sched_rr_get_interval(r2, &(0x7f0000000340)) futex(&(0x7f0000000380)=0x2, 0x8, 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) sched_rr_get_interval(r2, &(0x7f0000000440)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000480)) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000540)='id_resolver\x00', &(0x7f0000000600)=@keyring={'key_or_keyring:', r4}) sched_setattr(r0, &(0x7f0000000640)={0x38, 0x5, 0x0, 0x6, 0xfffff001, 0xf80, 0x20, 0x200, 0x5, 0x1}, 0x0) epoll_pwait2(r1, &(0x7f0000000680)=[{}, {}, {}], 0x3, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x2c53]}, 0x8) keyctl$revoke(0x3, r4) 13:46:23 executing program 5: r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000000), 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/44, 0x2c}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x3, 0xffffffffffffffff, 0x0, r1, 0xee00, 0x48, 0x40}, 0x3252, 0x1, 0x3, 0x5, 0x0, r0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r2) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000001300)={&(0x7f0000001200)=""/205, 0xcd}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) process_vm_writev(r3, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f0000001440)=""/8, 0x8}], 0x2, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r3, &(0x7f0000003a80)=[{&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/100, 0x64}, {&(0x7f0000003840)=""/119, 0x77}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003e80)={'erspan0\x00', &(0x7f0000003d40)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x1f, 0xef5, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x8, [{@multicast2, 0x2}, {@remote, 0x5c}, {@multicast2, 0x600}]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x5e, 0x3, [{0x1, 0x7, "e8c92dc3b8"}, {0x5, 0x10, "aef521331fa4eb0badb2eeca4e07"}, {0x2, 0x11, "fe536105858b00e31a1898e34a4885"}, {0x2, 0xd, "71a6e437a1936fc052b4b6"}, {0x6, 0x6, "00644c9b"}, {0x5, 0x3, "14"}, {0x2, 0xe, "a76f5e92a325c3cf4ec458e1"}, {0x1, 0x4, "d7a3"}, {0x0, 0x8, "e1bd2d5c4361"}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010102}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffff7}, {@multicast2, 0x80}, {@multicast2, 0x4}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3f}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x5, [{@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@loopback, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r4, 0x10000000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000003f00)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000003ec0), 0x0, 0x0, 0x800}, 0x6) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/231, 0xe7}], 0x1, &(0x7f0000004100)=[{&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/38, 0x26}], 0x2, 0x0) r7 = getpgid(r0) process_vm_readv(r7, &(0x7f0000005340)=[{&(0x7f0000004140)=""/9, 0x9}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/202, 0xca}, {&(0x7f0000004300)=""/43, 0x2b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f0000007580)=[{&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/30, 0x1e}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/112, 0x70}, {&(0x7f0000007540)=""/31, 0x1f}], 0x7, 0x0) 13:46:23 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) fstat(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {r8, r9}}, './file0\x00'}) 13:46:23 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r11, r12, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) prlimit64(r3, 0x2, 0x0, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000700)='nomand\x00', 0x0, 0x0) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r13) 13:46:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r9) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:23 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r11, r12, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) prlimit64(r3, 0x2, 0x0, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000700)='nomand\x00', 0x0, 0x0) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r13) 13:46:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x20040000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) 13:46:37 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0xce8d) r0 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0x5, &(0x7f0000000080)) futex(&(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x5]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sched_rr_get_interval(r2, &(0x7f0000000340)) futex(&(0x7f0000000380)=0x2, 0x8, 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) sched_rr_get_interval(r2, &(0x7f0000000440)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000480)) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000540)='id_resolver\x00', &(0x7f0000000600)=@keyring={'key_or_keyring:', r4}) sched_setattr(r0, &(0x7f0000000640)={0x38, 0x5, 0x0, 0x6, 0xfffff001, 0xf80, 0x20, 0x200, 0x5, 0x1}, 0x0) epoll_pwait2(r1, &(0x7f0000000680)=[{}, {}, {}], 0x3, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x2c53]}, 0x8) keyctl$revoke(0x3, r4) 13:46:37 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r10, r11, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) prlimit64(r3, 0x2, 0x0, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000700)='nomand\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:37 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) fstat(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {r8, r9}}, './file0\x00'}) 13:46:37 executing program 4: r0 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) r1 = syz_io_uring_setup(0x149, &(0x7f0000000040)={0x0, 0xd130, 0x4, 0x3, 0x42}, &(0x7f0000800000/0x800000)=nil, &(0x7f000092d000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xffff8000, &(0x7f00000001c0)={[0x800]}, 0x8) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480), 0x0, 0x0) r4 = syz_io_uring_setup(0x4962, &(0x7f00000004c0)={0x0, 0xe19b, 0x4, 0x0, 0x320, 0x0, r1}, &(0x7f0000e7a000/0x3000)=nil, &(0x7f000092a000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, r3, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="53663f54836ea290b8febad45ecd40a1fff4f01376e9b0c55ea7b6ad7a9aafd974b1964a47f8dc8f66264fa0737a9d4b4887562783f1d55276951df3c290a36e8511e31467bad2ae17f42d92fc4d073bd487579fbdcd0f17fee1e051a4eccf96d2ca5a52f710503775006ab202e210d53cc883feac65db39641200f333c6f72d6002cb85097a370be934419d9df4", 0x8e}, {&(0x7f0000000680)="31d9cb9b9bddca4892950b68c332779d4e75f611f8dcb50716ed75c8fb08b8c0944e3f65bbb921c704443940a3c6662a6fae0f2f7ab4798bbcc3bb1c93e3c84c", 0x40}, {&(0x7f00000006c0)="af5cb4ee1e7a8ec023c509cf0f749be24411cd2af738baaf27d6320b3aa540ff557762b8e09af1f0a701493753d723d20ad4b83cd5413f5ecd995c8c38086458db05", 0x42}, {&(0x7f0000000740)="cb72064394d54df147ed07dc6f0939ede1ed37deb287170420630b3f6c47981589916f45075dca9ddd8a943c1fcd15eb050db1355cdca798d1a3dde4de5059daef23de8ada", 0x45}], 0x4, 0x11, 0x1, {0x2}}, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2808c2, 0x0) r7 = getpgid(0x0) r8 = syz_io_uring_setup(0x6d9c, &(0x7f0000000880)={0x0, 0xb234, 0x20, 0x2, 0x3b7, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000099e000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000980)={r0, r8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000009c0)) epoll_wait(r8, &(0x7f0000000a00)=[{}, {}, {}], 0x3, 0x0) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, 0x0, r9, 0xee01) r10 = epoll_create(0x8) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) epoll_pwait2(r10, &(0x7f0000000a80)=[{}, {}], 0x2, &(0x7f0000000b00)={r11, r12+60000000}, &(0x7f0000000b40), 0x8) 13:46:37 executing program 5: r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000000), 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/44, 0x2c}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x3, 0xffffffffffffffff, 0x0, r1, 0xee00, 0x48, 0x40}, 0x3252, 0x1, 0x3, 0x5, 0x0, r0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r2) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000001300)={&(0x7f0000001200)=""/205, 0xcd}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) process_vm_writev(r3, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f0000001440)=""/8, 0x8}], 0x2, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r3, &(0x7f0000003a80)=[{&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/100, 0x64}, {&(0x7f0000003840)=""/119, 0x77}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003e80)={'erspan0\x00', &(0x7f0000003d40)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x1f, 0xef5, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x8, [{@multicast2, 0x2}, {@remote, 0x5c}, {@multicast2, 0x600}]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x5e, 0x3, [{0x1, 0x7, "e8c92dc3b8"}, {0x5, 0x10, "aef521331fa4eb0badb2eeca4e07"}, {0x2, 0x11, "fe536105858b00e31a1898e34a4885"}, {0x2, 0xd, "71a6e437a1936fc052b4b6"}, {0x6, 0x6, "00644c9b"}, {0x5, 0x3, "14"}, {0x2, 0xe, "a76f5e92a325c3cf4ec458e1"}, {0x1, 0x4, "d7a3"}, {0x0, 0x8, "e1bd2d5c4361"}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010102}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffff7}, {@multicast2, 0x80}, {@multicast2, 0x4}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3f}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x5, [{@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@loopback, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r4, 0x10000000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000003f00)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000003ec0), 0x0, 0x0, 0x800}, 0x6) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/231, 0xe7}], 0x1, &(0x7f0000004100)=[{&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/38, 0x26}], 0x2, 0x0) r7 = getpgid(r0) process_vm_readv(r7, &(0x7f0000005340)=[{&(0x7f0000004140)=""/9, 0x9}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/202, 0xca}, {&(0x7f0000004300)=""/43, 0x2b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f0000007580)=[{&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/30, 0x1e}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/112, 0x70}, {&(0x7f0000007540)=""/31, 0x1f}], 0x7, 0x0) 13:46:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r9) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x20040000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) 13:46:37 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x0) clock_gettime(0x6, &(0x7f0000000100)) clock_gettime(0x4, &(0x7f0000000140)) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x20]}, 0x8) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x6, &(0x7f0000000280)={0xfffffffffffffa53, 0xe000000000000000}, &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x1) epoll_pwait2(r0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xffffffff80000001]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, 0xee00, r2, 0xffffffffffffffff, 0x0, 0x22, 0x7ff}, 0x1, 0xfffffffffffffffe, 0x8, 0x3, r1, r1, 0x6}) clock_gettime(0x0, &(0x7f0000000500)) futex(&(0x7f0000000540)=0x2, 0xb, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000800)={0x0, "c578fab5d364bc2f93cdc280c041cad787f09d9cea68206372904058879d5ca2170ecb7f747f61bf79f21a999081a85f687607f87f03babab833ea1580533da6", 0x19}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000880)='cifs.idmap\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f00000008c0)=""/141, 0x8d) 13:46:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:37 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r10, r11, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) prlimit64(r3, 0x2, 0x0, &(0x7f00000006c0)) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:37 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) fstat(r7, &(0x7f0000000500)) 13:46:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) [ 179.670746] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.670910] Bluetooth: hci0: command 0x0406 tx timeout [ 179.671328] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.672330] Bluetooth: hci3: command 0x0406 tx timeout [ 179.672692] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.672700] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.673542] Bluetooth: hci7: command 0x0406 tx timeout [ 179.674235] Call Trace: [ 179.674242] [ 179.674253] __schedule+0x893/0x2470 [ 179.676521] Bluetooth: hci1: command 0x0406 tx timeout [ 179.676890] ? io_schedule_timeout+0x150/0x150 [ 179.677338] Bluetooth: hci2: command 0x0406 tx timeout [ 179.677495] ? do_raw_spin_lock+0x121/0x260 [ 179.678131] Bluetooth: hci4: command 0x0406 tx timeout [ 179.678490] ? rwlock_bug.part.0+0x90/0x90 [ 179.679254] Bluetooth: hci6: command 0x0406 tx timeout [ 179.679630] schedule+0xda/0x1b0 [ 179.681790] rescuer_thread+0x851/0xdb0 [ 179.682109] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.682499] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.682915] ? lockdep_hardirqs_on+0x79/0x100 [ 179.683268] ? worker_thread+0x1260/0x1260 [ 179.683600] kthread+0x2ed/0x3a0 [ 179.683895] ? kthread_complete_and_exit+0x40/0x40 [ 179.684281] ret_from_fork+0x22/0x30 [ 179.684584] [ 179.684788] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.685264] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.685675] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.686234] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.686877] Call Trace: [ 179.687078] [ 179.687257] __schedule+0x893/0x2470 [ 179.687555] ? io_schedule_timeout+0x150/0x150 [ 179.687933] ? do_raw_spin_lock+0x121/0x260 [ 179.688279] ? rwlock_bug.part.0+0x90/0x90 [ 179.688632] schedule+0xda/0x1b0 [ 179.688902] rescuer_thread+0x851/0xdb0 [ 179.689209] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.689588] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.689984] ? lockdep_hardirqs_on+0x79/0x100 [ 179.690331] ? worker_thread+0x1260/0x1260 [ 179.690676] kthread+0x2ed/0x3a0 [ 179.690942] ? kthread_complete_and_exit+0x40/0x40 [ 179.691315] ret_from_fork+0x22/0x30 [ 179.691639] [ 179.691824] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.692321] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.692712] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.693231] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.693821] Call Trace: [ 179.694003] [ 179.694167] __schedule+0x893/0x2470 [ 179.694441] ? io_schedule_timeout+0x150/0x150 [ 179.694786] ? do_raw_spin_lock+0x121/0x260 [ 179.695094] ? rwlock_bug.part.0+0x90/0x90 [ 179.695400] schedule+0xda/0x1b0 [ 179.695670] rescuer_thread+0x851/0xdb0 [ 179.695960] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.696316] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.696688] ? lockdep_hardirqs_on+0x79/0x100 [ 179.697011] ? worker_thread+0x1260/0x1260 [ 179.697307] kthread+0x2ed/0x3a0 [ 179.697546] ? kthread_complete_and_exit+0x40/0x40 [ 179.697914] ret_from_fork+0x22/0x30 [ 179.698189] [ 179.698354] INFO: task netns:6 blocked for more than 143 seconds. [ 179.698788] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.699145] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.699700] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.700263] Call Trace: [ 179.700448] [ 179.700638] __schedule+0x893/0x2470 [ 179.700915] ? io_schedule_timeout+0x150/0x150 [ 179.701229] ? do_raw_spin_lock+0x121/0x260 [ 179.701530] ? rwlock_bug.part.0+0x90/0x90 [ 179.701859] schedule+0xda/0x1b0 [ 179.702107] rescuer_thread+0x851/0xdb0 [ 179.702390] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.702769] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.703122] ? lockdep_hardirqs_on+0x79/0x100 [ 179.703437] ? worker_thread+0x1260/0x1260 [ 179.703765] kthread+0x2ed/0x3a0 [ 179.704009] ? kthread_complete_and_exit+0x40/0x40 [ 179.704363] ret_from_fork+0x22/0x30 [ 179.704662] [ 179.704833] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.705273] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.705659] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.706166] task:kworker/0:0H state:I stack:29136 pid:8 ppid:2 flags:0x00004000 [ 179.706746] Workqueue: 0x0 (kblockd) [ 179.707025] Call Trace: [ 179.707206] [ 179.707369] __schedule+0x893/0x2470 [ 179.707667] ? io_schedule_timeout+0x150/0x150 [ 179.707994] schedule+0xda/0x1b0 [ 179.708244] worker_thread+0x15f/0x1260 [ 179.708535] ? process_one_work+0x16a0/0x16a0 [ 179.708880] kthread+0x2ed/0x3a0 [ 179.709124] ? kthread_complete_and_exit+0x40/0x40 [ 179.709467] ret_from_fork+0x22/0x30 [ 179.709769] [ 179.709941] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.710396] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.710777] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.711289] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.711871] Call Trace: [ 179.712052] [ 179.712231] __schedule+0x893/0x2470 [ 179.712499] ? io_schedule_timeout+0x150/0x150 [ 179.712843] ? do_raw_spin_lock+0x121/0x260 [ 179.713149] ? rwlock_bug.part.0+0x90/0x90 [ 179.713447] schedule+0xda/0x1b0 [ 179.713716] rescuer_thread+0x851/0xdb0 [ 179.713997] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.714338] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.714706] ? lockdep_hardirqs_on+0x79/0x100 [ 179.715023] ? worker_thread+0x1260/0x1260 [ 179.715323] kthread+0x2ed/0x3a0 [ 179.715562] ? kthread_complete_and_exit+0x40/0x40 [ 179.715929] ret_from_fork+0x22/0x30 [ 179.716215] [ 179.716382] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.716870] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.717229] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.717763] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.718319] Call Trace: [ 179.718498] [ 179.718689] __schedule+0x893/0x2470 [ 179.718960] ? io_schedule_timeout+0x150/0x150 [ 179.719284] ? mark_held_locks+0x9e/0xe0 [ 179.719570] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.719942] schedule+0xda/0x1b0 [ 179.720205] rcu_tasks_one_gp+0x3db/0xc10 [ 179.720511] rcu_tasks_kthread+0x80/0xa0 [ 179.720821] ? rcu_tasks_postscan+0x10/0x10 [ 179.721122] kthread+0x2ed/0x3a0 [ 179.721362] ? kthread_complete_and_exit+0x40/0x40 [ 179.721726] ret_from_fork+0x22/0x30 [ 179.722005] [ 179.722177] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 179.722646] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.723004] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.723508] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 179.724096] Workqueue: 0x0 (rcu_gp) [ 179.724361] Call Trace: [ 179.724540] [ 179.724727] __schedule+0x893/0x2470 [ 179.724998] ? io_schedule_timeout+0x150/0x150 [ 179.725326] schedule+0xda/0x1b0 [ 179.725568] worker_thread+0x15f/0x1260 [ 179.725886] ? process_one_work+0x16a0/0x16a0 [ 179.726202] kthread+0x2ed/0x3a0 [ 179.726443] ? kthread_complete_and_exit+0x40/0x40 [ 179.726809] ret_from_fork+0x22/0x30 [ 179.727087] [ 179.727252] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.727725] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.728089] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.728597] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.729183] Workqueue: 0x0 (events_highpri) [ 179.729488] Call Trace: [ 179.729694] [ 179.729859] __schedule+0x893/0x2470 [ 179.730127] ? io_schedule_timeout+0x150/0x150 [ 179.730456] schedule+0xda/0x1b0 [ 179.730733] worker_thread+0x15f/0x1260 [ 179.731030] ? process_one_work+0x16a0/0x16a0 [ 179.731346] kthread+0x2ed/0x3a0 [ 179.731590] ? kthread_complete_and_exit+0x40/0x40 [ 179.731960] ret_from_fork+0x22/0x30 [ 179.732248] [ 179.732413] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.732886] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.733242] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.733778] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.734335] Call Trace: [ 179.734514] [ 179.734713] __schedule+0x893/0x2470 [ 179.734988] ? io_schedule_timeout+0x150/0x150 [ 179.735304] ? do_raw_spin_lock+0x121/0x260 [ 179.735638] ? rwlock_bug.part.0+0x90/0x90 [ 179.735942] schedule+0xda/0x1b0 [ 179.736193] rescuer_thread+0x851/0xdb0 [ 179.736473] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.736842] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.737191] ? lockdep_hardirqs_on+0x79/0x100 [ 179.737508] ? worker_thread+0x1260/0x1260 [ 179.737832] kthread+0x2ed/0x3a0 [ 179.738077] ? kthread_complete_and_exit+0x40/0x40 [ 179.738414] ret_from_fork+0x22/0x30 [ 179.738715] [ 179.738937] [ 179.738937] Showing all locks held in the system: [ 179.739351] 1 lock held by rcu_tasks_kthre/11: [ 179.739681] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.740367] 1 lock held by khungtaskd/26: [ 179.740669] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.741290] 1 lock held by systemd-journal/112: [ 179.741609] 1 lock held by in:imklog/212: [ 179.741910] #0: ffff88800d4a3268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 179.742485] 2 locks held by syz-executor/4546: [ 179.742819] [ 179.742943] ============================================= [ 179.742943] 13:46:51 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x0) clock_gettime(0x6, &(0x7f0000000100)) clock_gettime(0x4, &(0x7f0000000140)) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x20]}, 0x8) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x6, &(0x7f0000000280)={0xfffffffffffffa53, 0xe000000000000000}, &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x1) epoll_pwait2(r0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xffffffff80000001]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, 0xee00, r2, 0xffffffffffffffff, 0x0, 0x22, 0x7ff}, 0x1, 0xfffffffffffffffe, 0x8, 0x3, r1, r1, 0x6}) clock_gettime(0x0, &(0x7f0000000500)) futex(&(0x7f0000000540)=0x2, 0xb, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000800)={0x0, "c578fab5d364bc2f93cdc280c041cad787f09d9cea68206372904058879d5ca2170ecb7f747f61bf79f21a999081a85f687607f87f03babab833ea1580533da6", 0x19}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000880)='cifs.idmap\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f00000008c0)=""/141, 0x8d) 13:46:51 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) 13:46:51 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0xce8d) r0 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0x5, &(0x7f0000000080)) futex(&(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x5]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sched_rr_get_interval(r2, &(0x7f0000000340)) futex(&(0x7f0000000380)=0x2, 0x8, 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) sched_rr_get_interval(r2, &(0x7f0000000440)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000480)) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000540)='id_resolver\x00', &(0x7f0000000600)=@keyring={'key_or_keyring:', r4}) sched_setattr(r0, &(0x7f0000000640)={0x38, 0x5, 0x0, 0x6, 0xfffff001, 0xf80, 0x20, 0x200, 0x5, 0x1}, 0x0) epoll_pwait2(r1, &(0x7f0000000680)=[{}, {}, {}], 0x3, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x2c53]}, 0x8) keyctl$revoke(0x3, r4) 13:46:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:51 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) r8 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{0x1, 0xee00, r9, r10, r11, 0x41, 0x3}, 0x2, 0x7, 0x3ff, 0x4, r7, r5, 0x9}) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:51 executing program 5: r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000000), 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/44, 0x2c}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x3, 0xffffffffffffffff, 0x0, r1, 0xee00, 0x48, 0x40}, 0x3252, 0x1, 0x3, 0x5, 0x0, r0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r2) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000001300)={&(0x7f0000001200)=""/205, 0xcd}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) process_vm_writev(r3, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f0000001440)=""/8, 0x8}], 0x2, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r3, &(0x7f0000003a80)=[{&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/100, 0x64}, {&(0x7f0000003840)=""/119, 0x77}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003e80)={'erspan0\x00', &(0x7f0000003d40)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x1f, 0xef5, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x8, [{@multicast2, 0x2}, {@remote, 0x5c}, {@multicast2, 0x600}]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x5e, 0x3, [{0x1, 0x7, "e8c92dc3b8"}, {0x5, 0x10, "aef521331fa4eb0badb2eeca4e07"}, {0x2, 0x11, "fe536105858b00e31a1898e34a4885"}, {0x2, 0xd, "71a6e437a1936fc052b4b6"}, {0x6, 0x6, "00644c9b"}, {0x5, 0x3, "14"}, {0x2, 0xe, "a76f5e92a325c3cf4ec458e1"}, {0x1, 0x4, "d7a3"}, {0x0, 0x8, "e1bd2d5c4361"}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010102}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffff7}, {@multicast2, 0x80}, {@multicast2, 0x4}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3f}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x5, [{@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@loopback, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r4, 0x10000000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000003f00)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000003ec0), 0x0, 0x0, 0x800}, 0x6) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/231, 0xe7}], 0x1, &(0x7f0000004100)=[{&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/38, 0x26}], 0x2, 0x0) r7 = getpgid(r0) process_vm_readv(r7, &(0x7f0000005340)=[{&(0x7f0000004140)=""/9, 0x9}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/202, 0xca}, {&(0x7f0000004300)=""/43, 0x2b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f0000007580)=[{&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/30, 0x1e}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/112, 0x70}, {&(0x7f0000007540)=""/31, 0x1f}], 0x7, 0x0) 13:46:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) 13:46:51 executing program 4: r0 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) r1 = syz_io_uring_setup(0x149, &(0x7f0000000040)={0x0, 0xd130, 0x4, 0x3, 0x42}, &(0x7f0000800000/0x800000)=nil, &(0x7f000092d000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xffff8000, &(0x7f00000001c0)={[0x800]}, 0x8) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480), 0x0, 0x0) r4 = syz_io_uring_setup(0x4962, &(0x7f00000004c0)={0x0, 0xe19b, 0x4, 0x0, 0x320, 0x0, r1}, &(0x7f0000e7a000/0x3000)=nil, &(0x7f000092a000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, r3, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="53663f54836ea290b8febad45ecd40a1fff4f01376e9b0c55ea7b6ad7a9aafd974b1964a47f8dc8f66264fa0737a9d4b4887562783f1d55276951df3c290a36e8511e31467bad2ae17f42d92fc4d073bd487579fbdcd0f17fee1e051a4eccf96d2ca5a52f710503775006ab202e210d53cc883feac65db39641200f333c6f72d6002cb85097a370be934419d9df4", 0x8e}, {&(0x7f0000000680)="31d9cb9b9bddca4892950b68c332779d4e75f611f8dcb50716ed75c8fb08b8c0944e3f65bbb921c704443940a3c6662a6fae0f2f7ab4798bbcc3bb1c93e3c84c", 0x40}, {&(0x7f00000006c0)="af5cb4ee1e7a8ec023c509cf0f749be24411cd2af738baaf27d6320b3aa540ff557762b8e09af1f0a701493753d723d20ad4b83cd5413f5ecd995c8c38086458db05", 0x42}, {&(0x7f0000000740)="cb72064394d54df147ed07dc6f0939ede1ed37deb287170420630b3f6c47981589916f45075dca9ddd8a943c1fcd15eb050db1355cdca798d1a3dde4de5059daef23de8ada", 0x45}], 0x4, 0x11, 0x1, {0x2}}, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2808c2, 0x0) r7 = getpgid(0x0) r8 = syz_io_uring_setup(0x6d9c, &(0x7f0000000880)={0x0, 0xb234, 0x20, 0x2, 0x3b7, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000099e000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000980)={r0, r8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000009c0)) epoll_wait(r8, &(0x7f0000000a00)=[{}, {}, {}], 0x3, 0x0) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, 0x0, r9, 0xee01) r10 = epoll_create(0x8) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) epoll_pwait2(r10, &(0x7f0000000a80)=[{}, {}], 0x2, &(0x7f0000000b00)={r11, r12+60000000}, &(0x7f0000000b40), 0x8) 13:46:51 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:51 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:51 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) socketpair(0x10, 0x80000, 0x961a, &(0x7f0000000480)) fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) 13:46:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ';-}\'{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4048004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x240040a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x8, 0x70bd27, 0x3, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4841}, 0xc1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}]}, 0x1c}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x9206808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x43}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) 13:46:51 executing program 5: r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000000), 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/44, 0x2c}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x3, 0xffffffffffffffff, 0x0, r1, 0xee00, 0x48, 0x40}, 0x3252, 0x1, 0x3, 0x5, 0x0, r0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r2) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000001300)={&(0x7f0000001200)=""/205, 0xcd}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) process_vm_writev(r3, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f0000001440)=""/8, 0x8}], 0x2, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r3, &(0x7f0000003a80)=[{&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/100, 0x64}, {&(0x7f0000003840)=""/119, 0x77}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003e80)={'erspan0\x00', &(0x7f0000003d40)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x1f, 0xef5, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x8, [{@multicast2, 0x2}, {@remote, 0x5c}, {@multicast2, 0x600}]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x5e, 0x3, [{0x1, 0x7, "e8c92dc3b8"}, {0x5, 0x10, "aef521331fa4eb0badb2eeca4e07"}, {0x2, 0x11, "fe536105858b00e31a1898e34a4885"}, {0x2, 0xd, "71a6e437a1936fc052b4b6"}, {0x6, 0x6, "00644c9b"}, {0x5, 0x3, "14"}, {0x2, 0xe, "a76f5e92a325c3cf4ec458e1"}, {0x1, 0x4, "d7a3"}, {0x0, 0x8, "e1bd2d5c4361"}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010102}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffff7}, {@multicast2, 0x80}, {@multicast2, 0x4}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3f}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x5, [{@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@loopback, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r4, 0x10000000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000003f00)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000003ec0), 0x0, 0x0, 0x800}, 0x6) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/231, 0xe7}], 0x1, &(0x7f0000004100)=[{&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/38, 0x26}], 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000005340)=[{&(0x7f0000004140)=""/9, 0x9}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/202, 0xca}, {&(0x7f0000004300)=""/43, 0x2b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f0000007580)=[{&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/30, 0x1e}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/112, 0x70}, {&(0x7f0000007540)=""/31, 0x1f}], 0x7, 0x0) 13:46:51 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000500)) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:52 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x0) clock_gettime(0x6, &(0x7f0000000100)) clock_gettime(0x4, &(0x7f0000000140)) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x20]}, 0x8) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x6, &(0x7f0000000280)={0xfffffffffffffa53, 0xe000000000000000}, &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x1) epoll_pwait2(r0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xffffffff80000001]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, 0xee00, r2, 0xffffffffffffffff, 0x0, 0x22, 0x7ff}, 0x1, 0xfffffffffffffffe, 0x8, 0x3, r1, r1, 0x6}) clock_gettime(0x0, &(0x7f0000000500)) futex(&(0x7f0000000540)=0x2, 0xb, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000800)={0x0, "c578fab5d364bc2f93cdc280c041cad787f09d9cea68206372904058879d5ca2170ecb7f747f61bf79f21a999081a85f687607f87f03babab833ea1580533da6", 0x19}, 0x48, 0xfffffffffffffff9) modify_ldt$read_default(0x2, &(0x7f00000008c0)=""/141, 0x8d) 13:46:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r8) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:52 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0xce8d) r0 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0x5, &(0x7f0000000080)) futex(&(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x5]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sched_rr_get_interval(r2, &(0x7f0000000340)) futex(&(0x7f0000000380)=0x2, 0x8, 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) sched_rr_get_interval(r2, &(0x7f0000000440)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000480)) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000540)='id_resolver\x00', &(0x7f0000000600)=@keyring={'key_or_keyring:', r4}) sched_setattr(r0, &(0x7f0000000640)={0x38, 0x5, 0x0, 0x6, 0xfffff001, 0xf80, 0x20, 0x200, 0x5, 0x1}, 0x0) keyctl$revoke(0x3, r4) 13:46:52 executing program 6: set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x404, 0x8001) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = epoll_create(0x3000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x0, 0x47, 0x0, "abb4ac59fadddd8c5df76c0336e802f02c17e7cf0dda0d0e81f66c9ea43b6121dd47d426951b4e4b421849db655829754286f0a968b8b91099622fe68903f839be4341f0c8faa04a028e4ffc44b4e61b"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=',#%-@\x00', 0x0, r3) r4 = socket(0x18, 0x80000, 0x401) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/156, 0x9c}) clock_nanosleep(0x5, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)) syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x200840) fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x1) 13:46:52 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:52 executing program 4: r0 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) r1 = syz_io_uring_setup(0x149, &(0x7f0000000040)={0x0, 0xd130, 0x4, 0x3, 0x42}, &(0x7f0000800000/0x800000)=nil, &(0x7f000092d000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xffff8000, &(0x7f00000001c0)={[0x800]}, 0x8) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480), 0x0, 0x0) r4 = syz_io_uring_setup(0x4962, &(0x7f00000004c0)={0x0, 0xe19b, 0x4, 0x0, 0x320, 0x0, r1}, &(0x7f0000e7a000/0x3000)=nil, &(0x7f000092a000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, r3, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="53663f54836ea290b8febad45ecd40a1fff4f01376e9b0c55ea7b6ad7a9aafd974b1964a47f8dc8f66264fa0737a9d4b4887562783f1d55276951df3c290a36e8511e31467bad2ae17f42d92fc4d073bd487579fbdcd0f17fee1e051a4eccf96d2ca5a52f710503775006ab202e210d53cc883feac65db39641200f333c6f72d6002cb85097a370be934419d9df4", 0x8e}, {&(0x7f0000000680)="31d9cb9b9bddca4892950b68c332779d4e75f611f8dcb50716ed75c8fb08b8c0944e3f65bbb921c704443940a3c6662a6fae0f2f7ab4798bbcc3bb1c93e3c84c", 0x40}, {&(0x7f00000006c0)="af5cb4ee1e7a8ec023c509cf0f749be24411cd2af738baaf27d6320b3aa540ff557762b8e09af1f0a701493753d723d20ad4b83cd5413f5ecd995c8c38086458db05", 0x42}, {&(0x7f0000000740)="cb72064394d54df147ed07dc6f0939ede1ed37deb287170420630b3f6c47981589916f45075dca9ddd8a943c1fcd15eb050db1355cdca798d1a3dde4de5059daef23de8ada", 0x45}], 0x4, 0x11, 0x1, {0x2}}, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2808c2, 0x0) r7 = getpgid(0x0) r8 = syz_io_uring_setup(0x6d9c, &(0x7f0000000880)={0x0, 0xb234, 0x20, 0x2, 0x3b7, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000099e000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000980)={r0, r8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000009c0)) epoll_wait(r8, &(0x7f0000000a00)=[{}, {}, {}], 0x3, 0x0) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, 0x0, r9, 0xee01) r10 = epoll_create(0x8) epoll_pwait2(r10, &(0x7f0000000a80)=[{}, {}], 0x2, &(0x7f0000000b00), &(0x7f0000000b40), 0x8) 13:46:52 executing program 5: r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000000), 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/44, 0x2c}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x3, 0xffffffffffffffff, 0x0, r1, 0xee00, 0x48, 0x40}, 0x3252, 0x1, 0x3, 0x5, 0x0, r0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r2) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000001300)={&(0x7f0000001200)=""/205, 0xcd}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) process_vm_writev(r3, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f0000001440)=""/8, 0x8}], 0x2, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r3, &(0x7f0000003a80)=[{&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/100, 0x64}, {&(0x7f0000003840)=""/119, 0x77}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/206, 0xce}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003e80)={'erspan0\x00', &(0x7f0000003d40)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x1f, 0xef5, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x8, [{@multicast2, 0x2}, {@remote, 0x5c}, {@multicast2, 0x600}]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x5e, 0x3, [{0x1, 0x7, "e8c92dc3b8"}, {0x5, 0x10, "aef521331fa4eb0badb2eeca4e07"}, {0x2, 0x11, "fe536105858b00e31a1898e34a4885"}, {0x2, 0xd, "71a6e437a1936fc052b4b6"}, {0x6, 0x6, "00644c9b"}, {0x5, 0x3, "14"}, {0x2, 0xe, "a76f5e92a325c3cf4ec458e1"}, {0x1, 0x4, "d7a3"}, {0x0, 0x8, "e1bd2d5c4361"}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0x8, [{@local, 0x5}, {@private=0xa010102}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffff7}, {@multicast2, 0x80}, {@multicast2, 0x4}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3f}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x5, [{@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@loopback, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r4, 0x10000000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000003f00)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000003ec0), 0x0, 0x0, 0x800}, 0x6) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/231, 0xe7}], 0x1, &(0x7f0000004100)=[{&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/38, 0x26}], 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000005340)=[{&(0x7f0000004140)=""/9, 0x9}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/202, 0xca}, {&(0x7f0000004300)=""/43, 0x2b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f0000007580)=[{&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/30, 0x1e}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/112, 0x70}, {&(0x7f0000007540)=""/31, 0x1f}], 0x7, 0x0) 13:46:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r8) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) 13:46:52 executing program 3: r0 = syz_io_uring_setup(0x637, &(0x7f0000000000)={0x0, 0x692e, 0x10, 0x2, 0x36b}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r3, 0x3b, &(0x7f0000000100)={0x30, 0x1f}) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xfffffffffffffff7, 0x240) write$nbd(r4, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x0, 0x3, "4403a7e9b0b96e2f041c7718a41ed57bac97db048efc6eae63cc513e4f39724f59ff3e685092e0b2f0f116bd2f627844245e5a47f6033004a4545a15564bf98b9cbe1d36f439801b22b93559435dedffe6785d66d4c0190d34408c48543e99f18e1a2674705bd64052cb7dd2f3276c32cc0cb044dd13848cb6f4a8724e872de3f2d188908f74ce34768eab8d3b396ac7aad261a0ee99bfa39d6a765e96063f7d1b94c54acbdba00755eb8df6cde01dde245885cdee6794ec31a841bdcb263231cfb7a83dcc2eac11eb811abe81041edbdc1c7d1609588a1e"}, 0xe8) r5 = getpgid(r3) r6 = io_uring_setup(0x674a, &(0x7f0000000380)={0x0, 0x64ea, 0x1, 0x2, 0xb4, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x200}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x7f, 0x0, 0xffff, 0x0, 0x1}, 0x3) r7 = getpgid(r3) rt_tgsigqueueinfo(r7, r5, 0x1d, &(0x7f0000000480)={0x2a, 0x1, 0x2}) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) socket$inet_icmp(0x2, 0x2, 0x1) 13:46:52 executing program 4: r0 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) r1 = syz_io_uring_setup(0x149, &(0x7f0000000040)={0x0, 0xd130, 0x4, 0x3, 0x42}, &(0x7f0000800000/0x800000)=nil, &(0x7f000092d000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xffff8000, &(0x7f00000001c0)={[0x800]}, 0x8) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480), 0x0, 0x0) r4 = syz_io_uring_setup(0x4962, &(0x7f00000004c0)={0x0, 0xe19b, 0x4, 0x0, 0x320, 0x0, r1}, &(0x7f0000e7a000/0x3000)=nil, &(0x7f000092a000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, r3, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="53663f54836ea290b8febad45ecd40a1fff4f01376e9b0c55ea7b6ad7a9aafd974b1964a47f8dc8f66264fa0737a9d4b4887562783f1d55276951df3c290a36e8511e31467bad2ae17f42d92fc4d073bd487579fbdcd0f17fee1e051a4eccf96d2ca5a52f710503775006ab202e210d53cc883feac65db39641200f333c6f72d6002cb85097a370be934419d9df4", 0x8e}, {&(0x7f0000000680)="31d9cb9b9bddca4892950b68c332779d4e75f611f8dcb50716ed75c8fb08b8c0944e3f65bbb921c704443940a3c6662a6fae0f2f7ab4798bbcc3bb1c93e3c84c", 0x40}, {&(0x7f00000006c0)="af5cb4ee1e7a8ec023c509cf0f749be24411cd2af738baaf27d6320b3aa540ff557762b8e09af1f0a701493753d723d20ad4b83cd5413f5ecd995c8c38086458db05", 0x42}, {&(0x7f0000000740)="cb72064394d54df147ed07dc6f0939ede1ed37deb287170420630b3f6c47981589916f45075dca9ddd8a943c1fcd15eb050db1355cdca798d1a3dde4de5059daef23de8ada", 0x45}], 0x4, 0x11, 0x1, {0x2}}, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2808c2, 0x0) r7 = getpgid(0x0) r8 = syz_io_uring_setup(0x6d9c, &(0x7f0000000880)={0x0, 0xb234, 0x20, 0x2, 0x3b7, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000099e000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000980)={r0, r8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000009c0)) epoll_wait(r8, &(0x7f0000000a00)=[{}, {}, {}], 0x3, 0x0) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, 0x0, r9, 0xee01) r10 = epoll_create(0x8) epoll_pwait2(r10, &(0x7f0000000a80)=[{}, {}], 0x2, &(0x7f0000000b00), &(0x7f0000000b40), 0x8) 13:46:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x20, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/].@:-{-\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x6859dd56cdd03fd9, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80010}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}}, 0x24004004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r8) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#/^\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6000084) VM DIAGNOSIS: 13:46:50 Registers: info registers vcpu 0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888035ec7768 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a3a148790 CR3=000000000f222000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4157438000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888008903580 RSI=ffffffff812c6586 RDI=0000000000000001 RBP=ffff888009017c30 RSP=ffff888009017bf8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000018 R13=ffff888035eb1ac0 R14=0000000000000200 R15=ffff888009017c80 RIP=ffffffff812c6588 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a3a122648 CR3=0000000019ff6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000