Warning: Permanently added '[localhost]:7766' (ECDSA) to the list of known hosts. 2022/09/30 08:59:08 fuzzer started 2022/09/30 08:59:09 dialing manager at localhost:40535 syzkaller login: [ 44.365977] cgroup: Unknown subsys name 'net' [ 44.458816] cgroup: Unknown subsys name 'rlimit' 2022/09/30 08:59:23 syscalls: 205 2022/09/30 08:59:23 code coverage: enabled 2022/09/30 08:59:23 comparison tracing: enabled 2022/09/30 08:59:23 extra coverage: enabled 2022/09/30 08:59:23 setuid sandbox: enabled 2022/09/30 08:59:23 namespace sandbox: enabled 2022/09/30 08:59:23 Android sandbox: enabled 2022/09/30 08:59:23 fault injection: enabled 2022/09/30 08:59:23 leak checking: enabled 2022/09/30 08:59:23 net packet injection: enabled 2022/09/30 08:59:23 net device setup: enabled 2022/09/30 08:59:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 08:59:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 08:59:23 USB emulation: enabled 2022/09/30 08:59:23 hci packet injection: enabled 2022/09/30 08:59:23 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 08:59:23 802.15.4 emulation: enabled 2022/09/30 08:59:23 fetching corpus: 0, signal 0/0 (executing program) 2022/09/30 08:59:24 starting 8 fuzzer processes 08:59:24 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x20080801) 08:59:25 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002f00)={r0, 0x6, 0x1d41, 0x1}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003300)={r8, 0x6}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000003780)={0x0, 0x1, 0x6, @random="dc4ad71cebbd"}, 0x10) [ 59.604558] audit: type=1400 audit(1664528365.027:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:59:25 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x62200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b40)={0x0, 0x4, 0x0, [0x20, 0x3, 0x462601e8, 0x8, 0x7ff], [0x3ff, 0x100000000, 0x100, 0x1f, 0x7fffffff, 0x5a79, 0x5, 0x0, 0x8001, 0x3f, 0x5, 0xffffffff, 0x0, 0x7ff, 0x5, 0x3, 0x100000001, 0x3, 0x620d, 0x40, 0x6, 0x5, 0x86c, 0x2, 0x1000, 0x93, 0x0, 0x40, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xc9e, 0x1, 0x7, 0x4, 0x101, 0x5, 0x200000000000000, 0x3, 0x5, 0x4, 0x48, 0xffff, 0x9e2, 0x63b5, 0x5, 0x7, 0x8001, 0x1, 0x8, 0xc4e0, 0x5, 0x2, 0x9, 0xc0, 0x10001, 0xdd1d, 0x0, 0x8, 0x6, 0x100000001, 0x889f, 0x7, 0x544489f4, 0x6, 0x401, 0x0, 0x10000, 0xffff, 0x3f, 0xc0, 0x8001, 0x5d, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7ff, 0x7, 0x735f, 0x8b, 0x1000, 0x7fffffff, 0x7ff, 0x0, 0x6d, 0x5d2f, 0x1f, 0xec5, 0x56f, 0x6, 0x7f, 0x1, 0x4, 0x0, 0xab8d, 0x3, 0x5, 0x4, 0x5, 0x401, 0x3f, 0x836f, 0xffffffff, 0x6, 0x5781, 0xac8, 0x2, 0x100, 0x3eead6aa, 0x9, 0x8000000, 0x3, 0xa38, 0x77, 0x8, 0x9, 0x38, 0x8, 0xffff, 0x5, 0x8]}) 08:59:25 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x1800) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x158, 0x0, 0x210, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25b8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x810}, 0x5) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 08:59:25 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', r4, 0x29, 0x4, 0x6, 0x3, 0x10, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x8, 0x6e}}) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 08:59:25 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 08:59:25 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000780)="dfb59c7001175876ad83b3ff91", 0xd) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x402100, 0x0) setsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000000800)="78d61a52e676082015ac3068096fbb262aa6a9d44d300f0eff7417dbdeb8934459cd45cf95e8ae85a8438ad9702e9d681b2a86d42ca221fe63f07c44a8b2f47b24475e4b822f", 0x46) 08:59:25 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e700)={0x4, [{r0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {r6, r7}, {}, {r8}, {0x0, r9}, {}, {0x0, r10}, {}, {}, {0x0, r11}, {r12}, {0x0, r13}, {}, {0x0, r14}, {}, {}, {r15}], 0x7a, "4ebd1455bda002"}) [ 60.848375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.849921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.851981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.854920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.856582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.857864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.863990] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.013352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.014937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.016603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.020584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.022459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.023872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.030977] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.115709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.117083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.120389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.121802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.124230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.125910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.128765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.130743] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.131431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.133689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.134850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.136416] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.140287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.143864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.152400] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.169198] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.245526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.246808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.249232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.251434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.261367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.275465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.277288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.279727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.281170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.282734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.284601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.289466] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.291403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.299996] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.301587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.306345] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.332554] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.334150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.353842] Bluetooth: hci4: HCI_REQ-0x0c1a [ 62.928795] Bluetooth: hci0: command 0x0409 tx timeout [ 63.057399] Bluetooth: hci1: command 0x0409 tx timeout [ 63.184172] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 63.184184] Bluetooth: hci5: command 0x0409 tx timeout [ 63.184374] Bluetooth: hci3: command 0x0409 tx timeout [ 63.313206] Bluetooth: hci2: command 0x0409 tx timeout [ 63.377182] Bluetooth: hci4: command 0x0409 tx timeout [ 63.377872] Bluetooth: hci6: command 0x0409 tx timeout [ 64.977230] Bluetooth: hci0: command 0x041b tx timeout [ 65.104140] Bluetooth: hci1: command 0x041b tx timeout [ 65.232143] Bluetooth: hci5: command 0x041b tx timeout [ 65.233487] Bluetooth: hci3: command 0x041b tx timeout [ 65.360163] Bluetooth: hci2: command 0x041b tx timeout [ 65.424189] Bluetooth: hci6: command 0x041b tx timeout [ 65.424677] Bluetooth: hci4: command 0x041b tx timeout [ 65.860409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.861781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.863601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.869308] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.872274] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.873424] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.882151] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.025181] Bluetooth: hci0: command 0x040f tx timeout [ 67.152175] Bluetooth: hci1: command 0x040f tx timeout [ 67.281195] Bluetooth: hci3: command 0x040f tx timeout [ 67.281208] Bluetooth: hci5: command 0x040f tx timeout [ 67.409152] Bluetooth: hci2: command 0x040f tx timeout [ 67.473253] Bluetooth: hci4: command 0x040f tx timeout [ 67.473262] Bluetooth: hci6: command 0x040f tx timeout [ 67.921173] Bluetooth: hci7: command 0x0409 tx timeout [ 69.073266] Bluetooth: hci0: command 0x0419 tx timeout [ 69.200230] Bluetooth: hci1: command 0x0419 tx timeout [ 69.328154] Bluetooth: hci3: command 0x0419 tx timeout [ 69.328645] Bluetooth: hci5: command 0x0419 tx timeout [ 69.456149] Bluetooth: hci2: command 0x0419 tx timeout [ 69.520211] Bluetooth: hci4: command 0x0419 tx timeout [ 69.520678] Bluetooth: hci6: command 0x0419 tx timeout [ 69.969139] Bluetooth: hci7: command 0x041b tx timeout [ 72.017141] Bluetooth: hci7: command 0x040f tx timeout [ 74.065161] Bluetooth: hci7: command 0x0419 tx timeout 09:00:21 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002f00)={r0, 0x6, 0x1d41, 0x1}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003300)={r8, 0x6}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000003780)={0x0, 0x1, 0x6, @random="dc4ad71cebbd"}, 0x10) 09:00:21 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002f00)={r0, 0x6, 0x1d41, 0x1}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003300)={r8, 0x6}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000003780)={0x0, 0x1, 0x6, @random="dc4ad71cebbd"}, 0x10) 09:00:22 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002f00)={r0, 0x6, 0x1d41, 0x1}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003300)={r8, 0x6}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000003780)={0x0, 0x1, 0x6, @random="dc4ad71cebbd"}, 0x10) 09:00:22 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002f00)={r0, 0x6, 0x1d41, 0x1}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003300)={r8, 0x6}) 09:00:22 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000780)="dfb59c7001175876ad83b3ff91", 0xd) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x402100, 0x0) setsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000000800)="78d61a52e676082015ac3068096fbb262aa6a9d44d300f0eff7417dbdeb8934459cd45cf95e8ae85a8438ad9702e9d681b2a86d42ca221fe63f07c44a8b2f47b24475e4b822f", 0x46) 09:00:22 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002f00)={r0, 0x6, 0x1d41, 0x1}) 09:00:22 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000780)="dfb59c7001175876ad83b3ff91", 0xd) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x402100, 0x0) setsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000000800)="78d61a52e676082015ac3068096fbb262aa6a9d44d300f0eff7417dbdeb8934459cd45cf95e8ae85a8438ad9702e9d681b2a86d42ca221fe63f07c44a8b2f47b24475e4b822f", 0x46) 09:00:22 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', r4, 0x29, 0x4, 0x6, 0x3, 0x10, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x8, 0x6e}}) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:00:39 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000780)="dfb59c7001175876ad83b3ff91", 0xd) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x402100, 0x0) setsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000000800)="78d61a52e676082015ac3068096fbb262aa6a9d44d300f0eff7417dbdeb8934459cd45cf95e8ae85a8438ad9702e9d681b2a86d42ca221fe63f07c44a8b2f47b24475e4b822f", 0x46) 09:00:39 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x20080801) 09:00:39 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x6, 0x4a}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:00:39 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x62200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b40)={0x0, 0x4, 0x0, [0x20, 0x3, 0x462601e8, 0x8, 0x7ff], [0x3ff, 0x100000000, 0x100, 0x1f, 0x7fffffff, 0x5a79, 0x5, 0x0, 0x8001, 0x3f, 0x5, 0xffffffff, 0x0, 0x7ff, 0x5, 0x3, 0x100000001, 0x3, 0x620d, 0x40, 0x6, 0x5, 0x86c, 0x2, 0x1000, 0x93, 0x0, 0x40, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xc9e, 0x1, 0x7, 0x4, 0x101, 0x5, 0x200000000000000, 0x3, 0x5, 0x4, 0x48, 0xffff, 0x9e2, 0x63b5, 0x5, 0x7, 0x8001, 0x1, 0x8, 0xc4e0, 0x5, 0x2, 0x9, 0xc0, 0x10001, 0xdd1d, 0x0, 0x8, 0x6, 0x100000001, 0x889f, 0x7, 0x544489f4, 0x6, 0x401, 0x0, 0x10000, 0xffff, 0x3f, 0xc0, 0x8001, 0x5d, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7ff, 0x7, 0x735f, 0x8b, 0x1000, 0x7fffffff, 0x7ff, 0x0, 0x6d, 0x5d2f, 0x1f, 0xec5, 0x56f, 0x6, 0x7f, 0x1, 0x4, 0x0, 0xab8d, 0x3, 0x5, 0x4, 0x5, 0x401, 0x3f, 0x836f, 0xffffffff, 0x6, 0x5781, 0xac8, 0x2, 0x100, 0x3eead6aa, 0x9, 0x8000000, 0x3, 0xa38, 0x77, 0x8, 0x9, 0x38, 0x8, 0xffff, 0x5, 0x8]}) 09:00:39 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x1800) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x158, 0x0, 0x210, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25b8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x810}, 0x5) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 09:00:39 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', r4, 0x29, 0x4, 0x6, 0x3, 0x10, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x8, 0x6e}}) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:00:39 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e700)={0x4, [{r0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {r6, r7}, {}, {r8}, {0x0, r9}, {}, {0x0, r10}, {}, {}, {0x0, r11}, {r12}, {0x0, r13}, {}, {0x0, r14}, {}, {}, {r15}], 0x7a, "4ebd1455bda002"}) 09:00:39 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:00:39 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x20080801) 09:00:39 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e700)={0x4, [{r0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {r6, r7}, {}, {r8}, {0x0, r9}, {}, {0x0, r10}, {}, {}, {0x0, r11}, {r12}, {0x0, r13}, {}, {0x0, r14}, {}, {}, {r15}], 0x7a, "4ebd1455bda002"}) 09:00:39 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:00:53 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000780)="dfb59c7001175876ad83b3ff91", 0xd) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x402100, 0x0) 09:00:53 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', r4, 0x29, 0x4, 0x6, 0x3, 0x10, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x8, 0x6e}}) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:00:53 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e700)={0x4, [{r0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {r6, r7}, {}, {r8}, {0x0, r9}, {}, {0x0, r10}, {}, {}, {0x0, r11}, {r12}, {0x0, r13}, {}, {0x0, r14}, {}, {}, {r15}], 0x7a, "4ebd1455bda002"}) 09:00:53 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:00:53 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x62200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b40)={0x0, 0x4, 0x0, [0x20, 0x3, 0x462601e8, 0x8, 0x7ff], [0x3ff, 0x100000000, 0x100, 0x1f, 0x7fffffff, 0x5a79, 0x5, 0x0, 0x8001, 0x3f, 0x5, 0xffffffff, 0x0, 0x7ff, 0x5, 0x3, 0x100000001, 0x3, 0x620d, 0x40, 0x6, 0x5, 0x86c, 0x2, 0x1000, 0x93, 0x0, 0x40, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xc9e, 0x1, 0x7, 0x4, 0x101, 0x5, 0x200000000000000, 0x3, 0x5, 0x4, 0x48, 0xffff, 0x9e2, 0x63b5, 0x5, 0x7, 0x8001, 0x1, 0x8, 0xc4e0, 0x5, 0x2, 0x9, 0xc0, 0x10001, 0xdd1d, 0x0, 0x8, 0x6, 0x100000001, 0x889f, 0x7, 0x544489f4, 0x6, 0x401, 0x0, 0x10000, 0xffff, 0x3f, 0xc0, 0x8001, 0x5d, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7ff, 0x7, 0x735f, 0x8b, 0x1000, 0x7fffffff, 0x7ff, 0x0, 0x6d, 0x5d2f, 0x1f, 0xec5, 0x56f, 0x6, 0x7f, 0x1, 0x4, 0x0, 0xab8d, 0x3, 0x5, 0x4, 0x5, 0x401, 0x3f, 0x836f, 0xffffffff, 0x6, 0x5781, 0xac8, 0x2, 0x100, 0x3eead6aa, 0x9, 0x8000000, 0x3, 0xa38, 0x77, 0x8, 0x9, 0x38, 0x8, 0xffff, 0x5, 0x8]}) 09:00:53 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x20080801) 09:00:53 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002a80)=@req={0x401, 0x5, 0x68db, 0x7}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:00:53 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x1800) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x158, 0x0, 0x210, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25b8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x810}, 0x5) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 09:00:53 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005700)) 09:00:53 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) r5 = socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000002680)={r6, 0x5, 0x7}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:00:53 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000780)="dfb59c7001175876ad83b3ff91", 0xd) 09:00:53 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:00:53 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) 09:00:53 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x1800) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x158, 0x0, 0x210, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25b8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x810}, 0x5) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 09:01:05 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', r4, 0x29, 0x4, 0x6, 0x3, 0x10, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x8, 0x6e}}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:01:05 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x62200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b40)={0x0, 0x4, 0x0, [0x20, 0x3, 0x462601e8, 0x8, 0x7ff], [0x3ff, 0x100000000, 0x100, 0x1f, 0x7fffffff, 0x5a79, 0x5, 0x0, 0x8001, 0x3f, 0x5, 0xffffffff, 0x0, 0x7ff, 0x5, 0x3, 0x100000001, 0x3, 0x620d, 0x40, 0x6, 0x5, 0x86c, 0x2, 0x1000, 0x93, 0x0, 0x40, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xc9e, 0x1, 0x7, 0x4, 0x101, 0x5, 0x200000000000000, 0x3, 0x5, 0x4, 0x48, 0xffff, 0x9e2, 0x63b5, 0x5, 0x7, 0x8001, 0x1, 0x8, 0xc4e0, 0x5, 0x2, 0x9, 0xc0, 0x10001, 0xdd1d, 0x0, 0x8, 0x6, 0x100000001, 0x889f, 0x7, 0x544489f4, 0x6, 0x401, 0x0, 0x10000, 0xffff, 0x3f, 0xc0, 0x8001, 0x5d, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7ff, 0x7, 0x735f, 0x8b, 0x1000, 0x7fffffff, 0x7ff, 0x0, 0x6d, 0x5d2f, 0x1f, 0xec5, 0x56f, 0x6, 0x7f, 0x1, 0x4, 0x0, 0xab8d, 0x3, 0x5, 0x4, 0x5, 0x401, 0x3f, 0x836f, 0xffffffff, 0x6, 0x5781, 0xac8, 0x2, 0x100, 0x3eead6aa, 0x9, 0x8000000, 0x3, 0xa38, 0x77, 0x8, 0x9, 0x38, 0x8, 0xffff, 0x5, 0x8]}) 09:01:05 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x1800) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x158, 0x0, 0x210, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25b8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x810}, 0x5) 09:01:05 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:05 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005500)) 09:01:05 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x3, 0xfe, 0x1}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:05 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) 09:01:05 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002280)={r0, 0xe53, 0x6}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:01:05 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [], 0x7, "e8d64160333da1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005300)) 09:01:05 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004300)={0x394a12a9, [], 0x7, "e8d64160333da1"}) 09:01:05 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000280)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:05 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001dc0)={'veth1_to_batadv\x00', @local}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:05 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:05 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x62200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) 09:01:17 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) 09:01:17 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:01:17 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:01:17 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:17 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004100)) 09:01:17 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:18 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:18 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) pipe2(&(0x7f0000000d40), 0x1800) 09:01:18 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003f00)) 09:01:18 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:01:18 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001d40)=0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:18 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) socket$inet6(0xa, 0xad6280e6cd4fdecd, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:01:18 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:18 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002f00)={0x0, [], 0xc1, "1a08907c8e07c3"}) 09:01:18 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:18 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)) [ 183.760441] Bluetooth: hci0: command 0x0406 tx timeout [ 183.761456] Bluetooth: hci1: command 0x0406 tx timeout [ 183.762413] Bluetooth: hci5: command 0x0406 tx timeout [ 183.763305] Bluetooth: hci2: command 0x0406 tx timeout [ 183.764260] Bluetooth: hci6: command 0x0406 tx timeout [ 183.765193] Bluetooth: hci4: command 0x0406 tx timeout [ 183.766130] Bluetooth: hci3: command 0x0406 tx timeout 09:01:29 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001840)={0x0, 0x2, @status={[0x9, 0x2, 0x9, 0x2, 0x2, 0x7]}, [0x9, 0x8, 0x31c2, 0x8, 0xa217, 0x8, 0x3, 0x7, 0x101, 0x806, 0x1, 0x8, 0x7f, 0x5, 0x9, 0x1, 0x3, 0x100000001, 0x8, 0x10000, 0x1, 0xfffffffffffffff8, 0x831, 0x8, 0x4, 0x1, 0xca67, 0x2, 0x74f, 0xa1, 0x8, 0x348f, 0x5, 0x0, 0x3, 0xf1d2, 0x7, 0x6, 0x4, 0x2, 0x10000, 0x7ff, 0x1, 0x8a, 0x5, 0x8, 0x9, 0x7f, 0x6, 0xd2, 0x0, 0x9, 0x10001, 0xfffffffffffffd11, 0x7ff, 0x7, 0x21, 0x7ff, 0x2, 0x3, 0x0, 0x7c04, 0x8, 0x12]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:01:29 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan4\x00'}) pipe2(&(0x7f0000000d40), 0x1800) 09:01:29 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:01:29 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:29 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:29 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) 09:01:29 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x3, [], 0x3f, "dc1f492a1569e2"}) 09:01:29 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:29 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b00)) 09:01:29 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) recvfrom$packet(r3, &(0x7f0000001800)=""/84, 0x54, 0x40002002, &(0x7f0000001900)={0x11, 0xf6, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:29 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x408400) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:29 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) fork() sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:01:29 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:01:29 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) 09:01:29 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000a80)={{r4}, r5, 0x2, @unused=[0x27d0, 0x3, 0x6, 0x5], @subvolid=0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:29 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) [ 187.344202] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.344918] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.345430] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.346128] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.346799] Call Trace: [ 187.346985] [ 187.347186] __schedule+0x893/0x2470 [ 187.347746] ? io_schedule_timeout+0x150/0x150 [ 187.348657] ? do_raw_spin_lock+0x121/0x260 [ 187.349434] ? rwlock_bug.part.0+0x90/0x90 [ 187.349740] schedule+0xda/0x1b0 [ 187.349986] rescuer_thread+0x851/0xdb0 [ 187.350289] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.350638] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.350984] ? lockdep_hardirqs_on+0x79/0x100 [ 187.351329] ? worker_thread+0x1260/0x1260 [ 187.351628] kthread+0x2ed/0x3a0 [ 187.351884] ? kthread_complete_and_exit+0x40/0x40 [ 187.352245] ret_from_fork+0x22/0x30 [ 187.352526] [ 187.352691] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.353153] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.353513] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.354113] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.354729] Call Trace: [ 187.354924] [ 187.355126] __schedule+0x893/0x2470 [ 187.355429] ? io_schedule_timeout+0x150/0x150 [ 187.355801] ? do_raw_spin_lock+0x121/0x260 [ 187.356153] ? rwlock_bug.part.0+0x90/0x90 [ 187.356494] schedule+0xda/0x1b0 [ 187.356758] rescuer_thread+0x851/0xdb0 [ 187.357063] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.357475] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.357864] ? lockdep_hardirqs_on+0x79/0x100 [ 187.358234] ? worker_thread+0x1260/0x1260 [ 187.358574] kthread+0x2ed/0x3a0 [ 187.358839] ? kthread_complete_and_exit+0x40/0x40 [ 187.359242] ret_from_fork+0x22/0x30 [ 187.359547] [ 187.359736] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.360257] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.360660] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.361258] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.361883] Call Trace: [ 187.362078] [ 187.362283] __schedule+0x893/0x2470 [ 187.362582] ? io_schedule_timeout+0x150/0x150 [ 187.362932] ? do_raw_spin_lock+0x121/0x260 [ 187.363288] ? rwlock_bug.part.0+0x90/0x90 [ 187.363623] schedule+0xda/0x1b0 [ 187.363895] rescuer_thread+0x851/0xdb0 [ 187.364228] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.364612] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.364989] ? lockdep_hardirqs_on+0x79/0x100 [ 187.365359] ? worker_thread+0x1260/0x1260 [ 187.365687] kthread+0x2ed/0x3a0 [ 187.365950] ? kthread_complete_and_exit+0x40/0x40 [ 187.366347] ret_from_fork+0x22/0x30 [ 187.366646] [ 187.366833] INFO: task netns:6 blocked for more than 143 seconds. [ 187.367304] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.367715] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.368316] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.368939] Call Trace: [ 187.369169] [ 187.369350] __schedule+0x893/0x2470 [ 187.369652] ? io_schedule_timeout+0x150/0x150 [ 187.370004] ? do_raw_spin_lock+0x121/0x260 [ 187.370355] ? rwlock_bug.part.0+0x90/0x90 [ 187.370686] schedule+0xda/0x1b0 [ 187.370948] rescuer_thread+0x851/0xdb0 [ 187.371288] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.371668] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.372060] ? lockdep_hardirqs_on+0x79/0x100 [ 187.372434] ? worker_thread+0x1260/0x1260 [ 187.372764] kthread+0x2ed/0x3a0 [ 187.373025] ? kthread_complete_and_exit+0x40/0x40 [ 187.373429] ret_from_fork+0x22/0x30 [ 187.373730] [ 187.373914] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.374433] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.374832] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.375429] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.376066] Workqueue: 0x0 (kblockd) [ 187.376388] Call Trace: [ 187.376577] [ 187.376743] __schedule+0x893/0x2470 [ 187.377016] ? io_schedule_timeout+0x150/0x150 [ 187.377370] schedule+0xda/0x1b0 [ 187.377619] worker_thread+0x15f/0x1260 [ 187.377915] ? process_one_work+0x16a0/0x16a0 [ 187.378264] kthread+0x2ed/0x3a0 [ 187.378513] ? kthread_complete_and_exit+0x40/0x40 [ 187.378860] ret_from_fork+0x22/0x30 [ 187.379165] [ 187.379339] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.379810] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.380194] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.380707] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.381296] Call Trace: [ 187.381479] [ 187.381644] __schedule+0x893/0x2470 [ 187.381914] ? io_schedule_timeout+0x150/0x150 [ 187.382257] ? do_raw_spin_lock+0x121/0x260 [ 187.382565] ? rwlock_bug.part.0+0x90/0x90 [ 187.382868] schedule+0xda/0x1b0 [ 187.383139] rescuer_thread+0x851/0xdb0 [ 187.383424] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.383789] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.384163] ? lockdep_hardirqs_on+0x79/0x100 [ 187.384482] ? worker_thread+0x1260/0x1260 [ 187.384783] kthread+0x2ed/0x3a0 [ 187.385027] ? kthread_complete_and_exit+0x40/0x40 [ 187.385400] ret_from_fork+0x22/0x30 [ 187.385678] [ 187.385846] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.386337] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.386699] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.387237] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.387806] Call Trace: [ 187.387984] [ 187.388179] __schedule+0x893/0x2470 [ 187.388453] ? io_schedule_timeout+0x150/0x150 [ 187.388772] ? mark_held_locks+0x9e/0xe0 [ 187.389060] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.389440] schedule+0xda/0x1b0 [ 187.389689] rcu_tasks_one_gp+0x3db/0xc10 [ 187.389996] rcu_tasks_kthread+0x80/0xa0 [ 187.390305] ? rcu_tasks_postscan+0x10/0x10 [ 187.390610] kthread+0x2ed/0x3a0 [ 187.390852] ? kthread_complete_and_exit+0x40/0x40 [ 187.391224] ret_from_fork+0x22/0x30 [ 187.391502] [ 187.391672] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.392156] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.392516] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.393029] task:kworker/1:0 state:I stack:29480 pid:20 ppid:2 flags:0x00004000 [ 187.393619] Workqueue: 0x0 (rcu_gp) [ 187.393889] Call Trace: [ 187.394070] [ 187.394265] __schedule+0x893/0x2470 [ 187.394539] ? io_schedule_timeout+0x150/0x150 [ 187.394868] schedule+0xda/0x1b0 [ 187.395136] worker_thread+0x15f/0x1260 [ 187.395436] ? process_one_work+0x16a0/0x16a0 [ 187.395757] kthread+0x2ed/0x3a0 [ 187.395997] ? kthread_complete_and_exit+0x40/0x40 [ 187.396368] ret_from_fork+0x22/0x30 [ 187.396646] [ 187.396815] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.397292] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.397653] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.398192] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.398756] Workqueue: 0x0 (events_highpri) [ 187.399067] Call Trace: [ 187.399286] [ 187.399454] __schedule+0x893/0x2470 [ 187.399733] ? io_schedule_timeout+0x150/0x150 [ 187.400061] schedule+0xda/0x1b0 [ 187.400338] worker_thread+0x15f/0x1260 [ 187.400636] ? process_one_work+0x16a0/0x16a0 [ 187.400954] kthread+0x2ed/0x3a0 [ 187.401221] ? kthread_complete_and_exit+0x40/0x40 [ 187.401567] ret_from_fork+0x22/0x30 [ 187.401842] [ 187.402012] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.402486] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.402847] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.403383] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.403965] Call Trace: [ 187.404170] [ 187.404336] __schedule+0x893/0x2470 [ 187.404605] ? io_schedule_timeout+0x150/0x150 [ 187.404926] ? do_raw_spin_lock+0x121/0x260 [ 187.405255] ? rwlock_bug.part.0+0x90/0x90 [ 187.405560] schedule+0xda/0x1b0 [ 187.405805] rescuer_thread+0x851/0xdb0 [ 187.406113] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.406462] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.406811] ? lockdep_hardirqs_on+0x79/0x100 [ 187.407155] ? worker_thread+0x1260/0x1260 [ 187.407462] kthread+0x2ed/0x3a0 [ 187.407710] ? kthread_complete_and_exit+0x40/0x40 [ 187.408054] ret_from_fork+0x22/0x30 [ 187.408355] [ 187.408592] [ 187.408592] Showing all locks held in the system: [ 187.409041] 1 lock held by rcu_tasks_kthre/11: [ 187.409405] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.410176] 1 lock held by khungtaskd/25: [ 187.410491] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.411201] 3 locks held by systemd-journal/111: [ 187.411557] 1 lock held by in:imklog/187: [ 187.411886] #0: ffff88800e9bd9e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 187.412554] 4 locks held by syz-executor/4243: [ 187.412896] [ 187.413033] ============================================= [ 187.413033] [ 191.952272] Bluetooth: hci7: command 0x0406 tx timeout 09:01:42 executing program 6: r0 = getpgrp(0x0) r1 = getpgrp(r0) fork() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getpgrp(r0) ioprio_set$pid(0x0, r1, 0x4007) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="6f55bac2bf3bdfd429cc4aaccaf4808e66bbfd10e145758573da9de9a1610ee8c7c3f6c618d29d1e046356dfe5ddf97933b2374ecc762f22ed7c9b5163e1c81a3c19796626d1fabb65e0b9a0ee1bbbe34762ffcd69e043a91a055c123d16dbf623893d8e3e680377013d78b9ab5cd79488604ba94ed05f219b275ece4c34db67a7534883e70afd65d5ed907b66ae27e511d2d197590d50091272a55dfdcf", 0x9e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x7, 0x80000000}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x140c1, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x71}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}}, 0x890) 09:01:42 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) accept$packet(r3, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:42 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:42 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x9, 0xd30b9deedf58f0cb, 0x8000}}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048001}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x214, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40090) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x863}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xb664cec8edcf27ab}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000ac0)={{0x0, 0x1, 0x8, 0x0, 0x8}, 0x200, 0xfffffffffffffe00, 0xffffffffffffffff}) 09:01:42 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x5, 0x4, {0x8, @struct={0x53d, 0x8}, 0x0, 0x80000000, 0x7fff, 0x40, 0xffffffff, 0xffffffffffffff72, 0xc2, @usage=0x3, 0x1, 0xfffffff8, [0x5, 0x3, 0x0, 0x8001, 0x10000, 0x7]}, {0xfffffffffffffffa, @struct={0x4, 0x2}, 0x0, 0x4, 0x4, 0x5, 0x3, 0x3, 0x20, @usage=0x11aa, 0x7fff, 0x1, [0x0, 0x64cc85d5, 0x5, 0x8001, 0x8000, 0x1f]}, {0x5, @usage, 0x0, 0xf3ab, 0xcb99, 0x3, 0x2, 0xe3f, 0x4c8, @usage=0xfffffffffffffff9, 0x7f, 0x1, [0x15b1, 0x1ff, 0x73e, 0x6, 0x1ff, 0xfff]}, {0x3ff, 0xfffffffffffffff9, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x7ff, 0x7cb, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0xa, 0x4, {0x2, @usage=0x400, 0x0, 0x7, 0x400, 0xe5, 0x1000, 0x7, 0xc0, @usage, 0x2c2, 0x80000001, [0x8, 0x0, 0x3, 0x1, 0x8f6, 0x8]}, {0xab2, @usage=0x1, r0, 0x1000, 0x8, 0x7fff, 0x20, 0x7, 0x40, @struct={0x80000000, 0x3}, 0x1200, 0x9, [0x6a, 0x0, 0x1, 0xfffffffffffffff7, 0x81, 0x8]}, {0x40, @usage=0xd6, r1, 0x0, 0x4, 0x800000000, 0xffffffffffff14ef, 0x3, 0xa1, @struct={0x7, 0x9d}, 0x0, 0x5, [0x8, 0xe8, 0xffffffffc490f4a9, 0x8, 0x9, 0x15c9274b]}, {0x7c}}) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c00)={r2, 0x5, 0x47a9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001000)={r4, 0x6, 0x4, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={r0, 0x8, 0x80}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002ec0)='pids.max\x00', 0x2, 0x0) 09:01:42 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001700)) 09:01:42 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb4050a4396e94bcb}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44055}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600c4090}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x20000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffb}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x34}}, 0x40) pipe2(&(0x7f0000000d40), 0x1800) 09:01:42 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:42 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001780)='/dev/net/tun\x00', &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) 09:01:42 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = fsmount(r1, 0x1, 0x8) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x2, 0x2d, 0x3}, {0x4c3, 0x6, 0x8, 0x6437}, {0x80, 0x4, 0x1, 0x7}, {0x651, 0x3, 0x7f, 0x1}, {0x1, 0x80, 0x8, 0x4}, {0x280, 0x5, 0x5, 0x400}]}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) 09:01:42 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)=')\x91\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/226) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xf, 0x3, {0x0, @usage=0x6, 0x0, 0xffffffff, 0x1, 0x20, 0x7, 0xfffffffffffffffb, 0x23, @usage=0xffffffffffffff64, 0x8, 0xfffffb47, [0x80000000, 0x100000001, 0x101, 0xd8, 0x2, 0x6]}, {0x4, @struct={0x3f, 0x5}, 0x0, 0xebc, 0x1, 0x6, 0x0, 0x0, 0x41, @struct={0x7fffffff, 0x2}, 0x4b, 0x9, [0xfffffffffffffffb, 0x0, 0xeac7, 0x26, 0x7, 0x6]}, {0x39c5a11f, @usage=0x5, 0x0, 0xfffffffffffffffd, 0x10000, 0x80000000, 0xadb7, 0x73666fb9, 0x422, @struct={0x1, 0xffffffff}, 0x9, 0xfff, [0x5, 0x4, 0x2, 0x8, 0x3, 0x67f20685]}, {0x8, 0x81, 0x5}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x460802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x2bd9, 0xe0, 0x94, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000740)=r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x80000000, 0x0, @private1, @loopback, 0x7, 0x80, 0x10001, 0x629}}) r3 = syz_open_dev$loop(&(0x7f0000000840), 0x2, 0x600) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:01:42 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-$#[:(-:\x8d#\x00', &(0x7f0000000040)="806a5db5bc49440f05fe4482005dff23a3c8bcc365d06d46826dc1731de3c0457c0c7a37b3468b47af8de77c6e9ec942ba2c12a223173d36a55e527404061830f988da195ca1f7350e400e155182019b6f42000c7fb50b243c13b183b45b1374c2b24d85c202", 0x66) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000500)={0xfff, [], 0x2, "d98fd318f6c863"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)) 09:01:42 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x361002, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x100000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=@updsa={0x3e0, 0x1a, 0x201, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x4e23, 0x265d, 0x2, 0xa0, 0x20, 0x33, 0x0, r2}, {@in6=@empty, 0x4d3, 0x32}, @in=@loopback, {0x3c15cdda, 0xffffffff, 0x0, 0x0, 0xffffffffffff9167, 0xfff8000000000000, 0x7, 0x6}, {0x662, 0x5, 0x5, 0x1}, {0x3ff, 0x2c80000, 0x7}, 0x70bd28, 0x3507, 0x2, 0x3, 0xab, 0x9e}, [@XFRMA_IF_ID={0x8, 0x1f, r4}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0x11a, 0x1, {{'rmd320-generic\x00'}, 0x690, "d260a75ede0e926d2928bae0822627b22fa93e61db05de51357c0de3b831af08dccdce8ff7eb39f1ccc37e439c3e54d130608bc94ee5d1bc98c926fcdbf3c8743b09e3832a1de0e5534fd6f66c9abc6ee31ba63f1434dbc654a36bfc2a0a76f36e4dc355ff781f5d5ae9c7914173844bf558f34dfe0f40755f325b633cab2646866fb2de6b941b55e1eed21c3b6bfd4a899a61f19fe59d00ef19ec624342985cf2434719973d545bd9a59153e5676d5478a4d3f2565502a519c01a01da035b576e83a75923273e59bb3aa5db3ca2a5849976"}}, @extra_flags={0x8, 0x18, 0x5}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0xc}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in6=@empty}}, @algo_crypt={0x6e, 0x2, {{'chacha20-neon\x00'}, 0x130, "e6590e046b85c509297f27b2b375a9aeb3352b2d8c9d920a7fbaa92a3e2e85187c34f6a9ee5e"}}, @algo_crypt={0x10d, 0x2, {{'pcbc(des-generic)\x00'}, 0x628, "69e3766bbd109314b07c1157d4fb90ad091c904d40205a5778ee8d33c1d9abf55e825f9bcc86ccc2744df8951bae7addcf199c0a5ef3ee2b37835f3ff124d1a16eb3e5fdfe68bd8b1ea3cf36234e89f17bb7b52d04b52d678cf4d8a216440dbaaf248e916ee306c77dca42e3461ebc46801c9eb1cf0951afa6a818688131c507894bcd98f48e1d5ddeebb4fc0826eeb1502b14c776a4dfbedced7b340afe3524f902901842b3562bf097ee0525bc464a2fcd7839c91f19ab36d92a10ca31b76f752ba7670c"}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x60}, 0x4040804) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r5}, r6, 0x2, @unused=[0x7, 0x80000000, 0x200, 0x5], @subvolid=0x8}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x800, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000001e40)={'xfrm0\x00'}) VM DIAGNOSIS: 09:01:33 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888018807cb0 RCX=0000000000000000 RDX=0000000080000000 RSI=ffff888018807ca8 RDI=0000000000000001 RBP=ffff888018800000 RSP=ffff888018807af8 R8 =ffffffff85e802f8 R9 =ffffffff85e802fc R10=ffffed1003100f7c R11=ffff888018807bb8 R12=ffff888018807bb9 R13=ffff888018807bd8 R14=ffff888018807b78 R15=0000000000000005 RIP=ffffffff8111afd2 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7c2ff5e900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7c2f354830 CR3=000000000f386000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2032333a31303a39 3020303320706553 YMM01=0000000000000000 0000000000000000 5d3638313734332e 37383120205b203a YMM02=0000000000000000 0000000000000000 7564656863735f5f 20205d3638313734 YMM03=0000000000000000 0000000000000000 2072656c6c616b7a 79732032333a3130 YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d383231363433 2e37383120205b20 YMM07=0000000000000000 0000000000000000 732032333a31303a 3930203033207065 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd65bf7080 CR3=000000003789e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 415c6f4200000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000