Warning: Permanently added '[localhost]:28741' (ECDSA) to the list of known hosts. 2022/10/03 00:25:21 fuzzer started 2022/10/03 00:25:22 dialing manager at localhost:35095 syzkaller login: [ 43.735943] cgroup: Unknown subsys name 'net' [ 43.849335] cgroup: Unknown subsys name 'rlimit' 2022/10/03 00:25:36 syscalls: 201 2022/10/03 00:25:36 code coverage: enabled 2022/10/03 00:25:36 comparison tracing: enabled 2022/10/03 00:25:36 extra coverage: enabled 2022/10/03 00:25:36 setuid sandbox: enabled 2022/10/03 00:25:36 namespace sandbox: enabled 2022/10/03 00:25:36 Android sandbox: enabled 2022/10/03 00:25:36 fault injection: enabled 2022/10/03 00:25:36 leak checking: enabled 2022/10/03 00:25:36 net packet injection: enabled 2022/10/03 00:25:36 net device setup: enabled 2022/10/03 00:25:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 00:25:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 00:25:36 USB emulation: enabled 2022/10/03 00:25:36 hci packet injection: enabled 2022/10/03 00:25:36 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 00:25:36 802.15.4 emulation: enabled 2022/10/03 00:25:36 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 00:25:37 starting 8 fuzzer processes 00:25:37 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000a00)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a80)={0x200, 0xda, 0x3ff, 0x6, 0x2, 0x80, 0x1f}, 0xc) 00:25:37 executing program 1: getrusage(0x0, &(0x7f0000000000)) rt_sigpending(&(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000140)) getrusage(0x1, &(0x7f0000000200)) getrusage(0x1, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=""/102) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_set$uid(0x0, r1, 0x4004) getrusage(0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r0, &(0x7f0000000600)={0x11, 0xe7, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) r3 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14, 0x80000) recvfrom$packet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)={0x11, 0x15, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0), 0x42, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001800), 0x40000000, 0x0) r6 = accept$packet(r3, 0x0, &(0x7f0000001880)) connect$packet(r6, &(0x7f00000018c0)={0x11, 0x1a, r2, 0x1, 0x36, 0x6, @random="bde76e2d5d3e"}, 0x14) 00:25:37 executing program 2: setpriority(0x2, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x1, 0x1b) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) wait4(0x0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffffe, 0x0, 0x80000001, 0x200, 0x26, 0xffffffff, 0x8}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x9, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/132, 0x84, 0x2, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x3c, 0x0, &(0x7f0000000440)="18cc98901f751bf9e5f66c3fe9a17964391b1553669300d42cd9e45489c66859ed0030ea198e6ab0f18a2f4c878da22902fca6812c000daa6ac3a95a"}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x854) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = fork() wait4(r3, 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000002b80)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8c6b74fc9943e374) 00:25:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) 00:25:37 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) accept4$packet(r5, &(0x7f0000000940), &(0x7f0000000980)=0x14, 0x81800) [ 58.876961] audit: type=1400 audit(1664756737.930:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:25:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x86e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 00:25:37 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) pause() pause() syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x3, 0x1, 0x8adac6f91198eb5, 0x81, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xc3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7f, 0xf7, 0xff, 0x1}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x1, [@generic={0xcd, 0x10, 0xb, "ca9f141d86401005642f4c4a2f5de62979f4450d820f39cd5e424f5f824178c5c65ca6f963fc34a3794f4a48b89cb06c5adc1ae9730d80a1f2b0ba056a0a418c2036070242e90e37236858444159fc0d4f02bed538e718365373000ff2e69f4d8070862eab6398c06055ace0735f4e4802319062087b4b6fd3020cccf1a08407f6703cc698266410181401efd42c8c9aaff44ae51a3758774797b87fccdcbc626cbac0c51d250295875657d27c0b9a57b973bf8c8987fa20d386714801bb9106af795c7340fce0ec4f1a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) prctl$PR_GET_THP_DISABLE(0x2a) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3f, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x79}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0xed, 0x0, 0xff, 0x7f}, 0x68, &(0x7f0000000a00)={0x5, 0xf, 0x68, 0x6, [@generic={0x31, 0x10, 0x4, "5d7636209b527e55368a2496d686ced41f6d1d25da973b330350368894b83551bad7e3fa96c88f8b32acaa58c9e5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "989d600c6220b0da49be97126cce0fef"}]}, 0x5, [{0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "8ecd60f086222ddb731ddd640105dd88556a97b75b0ca13c3686ab1984923237583bf218505232288f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x430}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "e31bfae0f556a314c5ad8f59dcc0fcac477a0b83fe64bd34dd46ad37c194ba24774faf3bf2c040a82dc18a71a69f8ff5f16c68dadfbc23343b92fb37f4bee8c49fa5a7b0d819d8a2db5b189b7a3820abec2e584bdfb9c4d7"}}, {0x59, &(0x7f0000000b80)=@string={0x59, 0x3, "fd710a0e0601360d4cdd9373f33cd0871399f9729b7c1153b741c05be79488689fbae7c84fd72724fb6aa744bb0847278e0475b8ff5399b895a99de83ef92bc1c029d889d29c1bd7191cfb03a37a799cf54a8b9c4010a7"}}, {0xa9, &(0x7f0000000c00)=@string={0xa9, 0x3, "37162c6fddbb4198ddc7d3e08c0900ab34e1d0c7ae3e4ad1e7986c027ec7dee8834900762cd5c1c2c544e313d25a058952e98c8a382f09074afda8bb959d4376e35484a4ac36a82fdda3ba97b41a37cc36631a865b2e16552fea715e94e924f5bc3f291753f7d4916a5078f40888a728f28e982d853f0cc1497cf45aea0ecbd8222fb62c9b8689e3d8a3193d075227d70da6bc53ea2e04b08cb55e076b6fff048ad440d7c62bee"}}]}) sysfs$3(0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20640, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000d80)={0x3, "4eac9ad7ff89d678a4fbf9e5a6a70eac4b359d5b1c05fac2103ed14b24dafb87d47206d5ba84342372fc7cf749be90bf2456f2ba13b3c4932ead26464d1371ef"}) r3 = syz_open_dev$hidraw(&(0x7f0000000e00), 0x9, 0x80800) write$hidraw(r3, &(0x7f0000000e40)="fa3552c2f0a10fcc35b3801c7a17dbd1f344de7726bead021bf151df3f34887786c1ce7c93bf54eff0c856e6166561ab9199522830527a432f5714f4d01ac529c1fdf961a3fad84bd017cdf777437ef6be46c495d26d", 0x56) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x0, "925d0a"}, 0x6) 00:25:37 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) [ 60.209444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.211165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.213189] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.215326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.216579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.217611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.219146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.220291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.221242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.226183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.227429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.228473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.230846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.233419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.251497] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.252481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.253407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.271806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.273060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.275291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.276753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.278859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.281162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.286303] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.288162] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.289093] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.292013] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.294519] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.296721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.306541] Bluetooth: hci5: HCI_REQ-0x0c1a [ 60.332144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.334054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.335460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.335855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.338735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.340047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.341800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.343679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.347360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.349014] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.350885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.352083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.354960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.356519] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.358530] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.359991] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.362341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.364096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 60.383517] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.385058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.389345] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.391105] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.396400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.403112] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.404553] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.416453] Bluetooth: hci7: HCI_REQ-0x0c1a [ 62.344647] Bluetooth: hci1: command 0x0409 tx timeout [ 62.345318] Bluetooth: hci5: command 0x0409 tx timeout [ 62.345844] Bluetooth: hci0: command 0x0409 tx timeout [ 62.346387] Bluetooth: hci2: command 0x0409 tx timeout [ 62.472296] Bluetooth: hci4: command 0x0409 tx timeout [ 62.472961] Bluetooth: hci6: command 0x0409 tx timeout [ 62.473478] Bluetooth: hci7: command 0x0409 tx timeout [ 62.473955] Bluetooth: hci3: command 0x0409 tx timeout [ 64.392305] Bluetooth: hci2: command 0x041b tx timeout [ 64.393017] Bluetooth: hci0: command 0x041b tx timeout [ 64.393697] Bluetooth: hci5: command 0x041b tx timeout [ 64.394473] Bluetooth: hci1: command 0x041b tx timeout [ 64.520429] Bluetooth: hci3: command 0x041b tx timeout [ 64.521112] Bluetooth: hci7: command 0x041b tx timeout [ 64.521756] Bluetooth: hci6: command 0x041b tx timeout [ 64.522378] Bluetooth: hci4: command 0x041b tx timeout [ 66.440286] Bluetooth: hci1: command 0x040f tx timeout [ 66.440769] Bluetooth: hci5: command 0x040f tx timeout [ 66.441169] Bluetooth: hci0: command 0x040f tx timeout [ 66.442347] Bluetooth: hci2: command 0x040f tx timeout [ 66.568285] Bluetooth: hci4: command 0x040f tx timeout [ 66.568758] Bluetooth: hci6: command 0x040f tx timeout [ 66.569160] Bluetooth: hci7: command 0x040f tx timeout [ 66.569602] Bluetooth: hci3: command 0x040f tx timeout [ 68.488334] Bluetooth: hci2: command 0x0419 tx timeout [ 68.488807] Bluetooth: hci0: command 0x0419 tx timeout [ 68.489264] Bluetooth: hci5: command 0x0419 tx timeout [ 68.489666] Bluetooth: hci1: command 0x0419 tx timeout [ 68.616308] Bluetooth: hci3: command 0x0419 tx timeout [ 68.616764] Bluetooth: hci7: command 0x0419 tx timeout [ 68.617169] Bluetooth: hci6: command 0x0419 tx timeout [ 68.617639] Bluetooth: hci4: command 0x0419 tx timeout 00:26:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) 00:26:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) 00:26:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) 00:26:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 00:26:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) 00:26:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x1) 00:26:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:26:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) [ 114.582000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.583256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.591164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.593358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:26:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:26:51 executing program 1: getrusage(0x0, &(0x7f0000000000)) rt_sigpending(&(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000140)) getrusage(0x1, &(0x7f0000000200)) getrusage(0x1, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=""/102) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_set$uid(0x0, r1, 0x4004) getrusage(0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r0, &(0x7f0000000600)={0x11, 0xe7, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) r3 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14, 0x80000) recvfrom$packet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)={0x11, 0x15, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0), 0x42, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001800), 0x40000000, 0x0) r6 = accept$packet(r3, 0x0, &(0x7f0000001880)) connect$packet(r6, &(0x7f00000018c0)={0x11, 0x1a, r2, 0x1, 0x36, 0x6, @random="bde76e2d5d3e"}, 0x14) 00:26:51 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) accept4$packet(r5, &(0x7f0000000940), &(0x7f0000000980)=0x14, 0x81800) 00:26:51 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:26:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x86e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 00:26:51 executing program 2: setpriority(0x2, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x1, 0x1b) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) wait4(0x0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffffe, 0x0, 0x80000001, 0x200, 0x26, 0xffffffff, 0x8}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x9, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/132, 0x84, 0x2, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x3c, 0x0, &(0x7f0000000440)="18cc98901f751bf9e5f66c3fe9a17964391b1553669300d42cd9e45489c66859ed0030ea198e6ab0f18a2f4c878da22902fca6812c000daa6ac3a95a"}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x854) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = fork() wait4(r3, 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000002b80)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8c6b74fc9943e374) 00:26:51 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) pause() pause() syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x3, 0x1, 0x8adac6f91198eb5, 0x81, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xc3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7f, 0xf7, 0xff, 0x1}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x1, [@generic={0xcd, 0x10, 0xb, "ca9f141d86401005642f4c4a2f5de62979f4450d820f39cd5e424f5f824178c5c65ca6f963fc34a3794f4a48b89cb06c5adc1ae9730d80a1f2b0ba056a0a418c2036070242e90e37236858444159fc0d4f02bed538e718365373000ff2e69f4d8070862eab6398c06055ace0735f4e4802319062087b4b6fd3020cccf1a08407f6703cc698266410181401efd42c8c9aaff44ae51a3758774797b87fccdcbc626cbac0c51d250295875657d27c0b9a57b973bf8c8987fa20d386714801bb9106af795c7340fce0ec4f1a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) prctl$PR_GET_THP_DISABLE(0x2a) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3f, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x79}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0xed, 0x0, 0xff, 0x7f}, 0x68, &(0x7f0000000a00)={0x5, 0xf, 0x68, 0x6, [@generic={0x31, 0x10, 0x4, "5d7636209b527e55368a2496d686ced41f6d1d25da973b330350368894b83551bad7e3fa96c88f8b32acaa58c9e5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "989d600c6220b0da49be97126cce0fef"}]}, 0x5, [{0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "8ecd60f086222ddb731ddd640105dd88556a97b75b0ca13c3686ab1984923237583bf218505232288f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x430}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "e31bfae0f556a314c5ad8f59dcc0fcac477a0b83fe64bd34dd46ad37c194ba24774faf3bf2c040a82dc18a71a69f8ff5f16c68dadfbc23343b92fb37f4bee8c49fa5a7b0d819d8a2db5b189b7a3820abec2e584bdfb9c4d7"}}, {0x59, &(0x7f0000000b80)=@string={0x59, 0x3, "fd710a0e0601360d4cdd9373f33cd0871399f9729b7c1153b741c05be79488689fbae7c84fd72724fb6aa744bb0847278e0475b8ff5399b895a99de83ef92bc1c029d889d29c1bd7191cfb03a37a799cf54a8b9c4010a7"}}, {0xa9, &(0x7f0000000c00)=@string={0xa9, 0x3, "37162c6fddbb4198ddc7d3e08c0900ab34e1d0c7ae3e4ad1e7986c027ec7dee8834900762cd5c1c2c544e313d25a058952e98c8a382f09074afda8bb959d4376e35484a4ac36a82fdda3ba97b41a37cc36631a865b2e16552fea715e94e924f5bc3f291753f7d4916a5078f40888a728f28e982d853f0cc1497cf45aea0ecbd8222fb62c9b8689e3d8a3193d075227d70da6bc53ea2e04b08cb55e076b6fff048ad440d7c62bee"}}]}) sysfs$3(0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20640, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000d80)={0x3, "4eac9ad7ff89d678a4fbf9e5a6a70eac4b359d5b1c05fac2103ed14b24dafb87d47206d5ba84342372fc7cf749be90bf2456f2ba13b3c4932ead26464d1371ef"}) r3 = syz_open_dev$hidraw(&(0x7f0000000e00), 0x9, 0x80800) write$hidraw(r3, &(0x7f0000000e40)="fa3552c2f0a10fcc35b3801c7a17dbd1f344de7726bead021bf151df3f34887786c1ce7c93bf54eff0c856e6166561ab9199522830527a432f5714f4d01ac529c1fdf961a3fad84bd017cdf777437ef6be46c495d26d", 0x56) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x0, "925d0a"}, 0x6) 00:26:51 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) accept4$packet(r5, &(0x7f0000000940), &(0x7f0000000980)=0x14, 0x81800) 00:26:51 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000a00)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a80)={0x200, 0xda, 0x3ff, 0x6, 0x2, 0x80, 0x1f}, 0xc) [ 132.818158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.819060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.829084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.829873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:26:51 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000a00)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a80)={0x200, 0xda, 0x3ff, 0x6, 0x2, 0x80, 0x1f}, 0xc) 00:27:08 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) pause() pause() syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x3, 0x1, 0x8adac6f91198eb5, 0x81, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xc3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7f, 0xf7, 0xff, 0x1}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x1, [@generic={0xcd, 0x10, 0xb, "ca9f141d86401005642f4c4a2f5de62979f4450d820f39cd5e424f5f824178c5c65ca6f963fc34a3794f4a48b89cb06c5adc1ae9730d80a1f2b0ba056a0a418c2036070242e90e37236858444159fc0d4f02bed538e718365373000ff2e69f4d8070862eab6398c06055ace0735f4e4802319062087b4b6fd3020cccf1a08407f6703cc698266410181401efd42c8c9aaff44ae51a3758774797b87fccdcbc626cbac0c51d250295875657d27c0b9a57b973bf8c8987fa20d386714801bb9106af795c7340fce0ec4f1a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) prctl$PR_GET_THP_DISABLE(0x2a) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3f, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x79}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0xed, 0x0, 0xff, 0x7f}, 0x68, &(0x7f0000000a00)={0x5, 0xf, 0x68, 0x6, [@generic={0x31, 0x10, 0x4, "5d7636209b527e55368a2496d686ced41f6d1d25da973b330350368894b83551bad7e3fa96c88f8b32acaa58c9e5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "989d600c6220b0da49be97126cce0fef"}]}, 0x5, [{0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "8ecd60f086222ddb731ddd640105dd88556a97b75b0ca13c3686ab1984923237583bf218505232288f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x430}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "e31bfae0f556a314c5ad8f59dcc0fcac477a0b83fe64bd34dd46ad37c194ba24774faf3bf2c040a82dc18a71a69f8ff5f16c68dadfbc23343b92fb37f4bee8c49fa5a7b0d819d8a2db5b189b7a3820abec2e584bdfb9c4d7"}}, {0x59, &(0x7f0000000b80)=@string={0x59, 0x3, "fd710a0e0601360d4cdd9373f33cd0871399f9729b7c1153b741c05be79488689fbae7c84fd72724fb6aa744bb0847278e0475b8ff5399b895a99de83ef92bc1c029d889d29c1bd7191cfb03a37a799cf54a8b9c4010a7"}}, {0xa9, &(0x7f0000000c00)=@string={0xa9, 0x3, "37162c6fddbb4198ddc7d3e08c0900ab34e1d0c7ae3e4ad1e7986c027ec7dee8834900762cd5c1c2c544e313d25a058952e98c8a382f09074afda8bb959d4376e35484a4ac36a82fdda3ba97b41a37cc36631a865b2e16552fea715e94e924f5bc3f291753f7d4916a5078f40888a728f28e982d853f0cc1497cf45aea0ecbd8222fb62c9b8689e3d8a3193d075227d70da6bc53ea2e04b08cb55e076b6fff048ad440d7c62bee"}}]}) sysfs$3(0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20640, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000d80)={0x3, "4eac9ad7ff89d678a4fbf9e5a6a70eac4b359d5b1c05fac2103ed14b24dafb87d47206d5ba84342372fc7cf749be90bf2456f2ba13b3c4932ead26464d1371ef"}) r3 = syz_open_dev$hidraw(&(0x7f0000000e00), 0x9, 0x80800) write$hidraw(r3, &(0x7f0000000e40)="fa3552c2f0a10fcc35b3801c7a17dbd1f344de7726bead021bf151df3f34887786c1ce7c93bf54eff0c856e6166561ab9199522830527a432f5714f4d01ac529c1fdf961a3fad84bd017cdf777437ef6be46c495d26d", 0x56) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x0, "925d0a"}, 0x6) 00:27:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:08 executing program 2: setpriority(0x2, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x1, 0x1b) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) wait4(0x0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffffe, 0x0, 0x80000001, 0x200, 0x26, 0xffffffff, 0x8}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x9, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/132, 0x84, 0x2, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x3c, 0x0, &(0x7f0000000440)="18cc98901f751bf9e5f66c3fe9a17964391b1553669300d42cd9e45489c66859ed0030ea198e6ab0f18a2f4c878da22902fca6812c000daa6ac3a95a"}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x854) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = fork() wait4(r3, 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000002b80)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8c6b74fc9943e374) 00:27:08 executing program 1: getrusage(0x0, &(0x7f0000000000)) rt_sigpending(&(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000140)) getrusage(0x1, &(0x7f0000000200)) getrusage(0x1, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=""/102) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_set$uid(0x0, r1, 0x4004) getrusage(0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r0, &(0x7f0000000600)={0x11, 0xe7, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) r3 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14, 0x80000) recvfrom$packet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)={0x11, 0x15, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0), 0x42, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001800), 0x40000000, 0x0) r6 = accept$packet(r3, 0x0, &(0x7f0000001880)) connect$packet(r6, &(0x7f00000018c0)={0x11, 0x1a, r2, 0x1, 0x36, 0x6, @random="bde76e2d5d3e"}, 0x14) 00:27:08 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) accept4$packet(r5, &(0x7f0000000940), &(0x7f0000000980)=0x14, 0x81800) 00:27:08 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:27:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x86e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 00:27:08 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000a00)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a80)={0x200, 0xda, 0x3ff, 0x6, 0x2, 0x80, 0x1f}, 0xc) 00:27:08 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) [ 149.602179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.603761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.637012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.644578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:27:08 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000a00)) 00:27:08 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) 00:27:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x86e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 00:27:23 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) pause() pause() syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x3, 0x1, 0x8adac6f91198eb5, 0x81, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xc3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7f, 0xf7, 0xff, 0x1}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x1, [@generic={0xcd, 0x10, 0xb, "ca9f141d86401005642f4c4a2f5de62979f4450d820f39cd5e424f5f824178c5c65ca6f963fc34a3794f4a48b89cb06c5adc1ae9730d80a1f2b0ba056a0a418c2036070242e90e37236858444159fc0d4f02bed538e718365373000ff2e69f4d8070862eab6398c06055ace0735f4e4802319062087b4b6fd3020cccf1a08407f6703cc698266410181401efd42c8c9aaff44ae51a3758774797b87fccdcbc626cbac0c51d250295875657d27c0b9a57b973bf8c8987fa20d386714801bb9106af795c7340fce0ec4f1a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) prctl$PR_GET_THP_DISABLE(0x2a) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3f, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x79}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0xed, 0x0, 0xff, 0x7f}, 0x68, &(0x7f0000000a00)={0x5, 0xf, 0x68, 0x6, [@generic={0x31, 0x10, 0x4, "5d7636209b527e55368a2496d686ced41f6d1d25da973b330350368894b83551bad7e3fa96c88f8b32acaa58c9e5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "989d600c6220b0da49be97126cce0fef"}]}, 0x5, [{0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "8ecd60f086222ddb731ddd640105dd88556a97b75b0ca13c3686ab1984923237583bf218505232288f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x430}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "e31bfae0f556a314c5ad8f59dcc0fcac477a0b83fe64bd34dd46ad37c194ba24774faf3bf2c040a82dc18a71a69f8ff5f16c68dadfbc23343b92fb37f4bee8c49fa5a7b0d819d8a2db5b189b7a3820abec2e584bdfb9c4d7"}}, {0x59, &(0x7f0000000b80)=@string={0x59, 0x3, "fd710a0e0601360d4cdd9373f33cd0871399f9729b7c1153b741c05be79488689fbae7c84fd72724fb6aa744bb0847278e0475b8ff5399b895a99de83ef92bc1c029d889d29c1bd7191cfb03a37a799cf54a8b9c4010a7"}}, {0xa9, &(0x7f0000000c00)=@string={0xa9, 0x3, "37162c6fddbb4198ddc7d3e08c0900ab34e1d0c7ae3e4ad1e7986c027ec7dee8834900762cd5c1c2c544e313d25a058952e98c8a382f09074afda8bb959d4376e35484a4ac36a82fdda3ba97b41a37cc36631a865b2e16552fea715e94e924f5bc3f291753f7d4916a5078f40888a728f28e982d853f0cc1497cf45aea0ecbd8222fb62c9b8689e3d8a3193d075227d70da6bc53ea2e04b08cb55e076b6fff048ad440d7c62bee"}}]}) sysfs$3(0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20640, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000d80)={0x3, "4eac9ad7ff89d678a4fbf9e5a6a70eac4b359d5b1c05fac2103ed14b24dafb87d47206d5ba84342372fc7cf749be90bf2456f2ba13b3c4932ead26464d1371ef"}) r3 = syz_open_dev$hidraw(&(0x7f0000000e00), 0x9, 0x80800) write$hidraw(r3, &(0x7f0000000e40)="fa3552c2f0a10fcc35b3801c7a17dbd1f344de7726bead021bf151df3f34887786c1ce7c93bf54eff0c856e6166561ab9199522830527a432f5714f4d01ac529c1fdf961a3fad84bd017cdf777437ef6be46c495d26d", 0x56) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x0, "925d0a"}, 0x6) 00:27:23 executing program 2: setpriority(0x2, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x1, 0x1b) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) wait4(0x0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffffe, 0x0, 0x80000001, 0x200, 0x26, 0xffffffff, 0x8}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x9, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/132, 0x84, 0x2, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x3c, 0x0, &(0x7f0000000440)="18cc98901f751bf9e5f66c3fe9a17964391b1553669300d42cd9e45489c66859ed0030ea198e6ab0f18a2f4c878da22902fca6812c000daa6ac3a95a"}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x854) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = fork() wait4(r3, 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000002b80)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8c6b74fc9943e374) 00:27:23 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:27:23 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresgid(r0, r1, r7) 00:27:23 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) 00:27:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:23 executing program 1: getrusage(0x0, &(0x7f0000000000)) rt_sigpending(&(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000140)) getrusage(0x1, &(0x7f0000000200)) getrusage(0x1, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=""/102) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_set$uid(0x0, r1, 0x4004) getrusage(0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r0, &(0x7f0000000600)={0x11, 0xe7, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) r3 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14, 0x80000) recvfrom$packet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)={0x11, 0x15, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0), 0x42, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001800), 0x40000000, 0x0) r6 = accept$packet(r3, 0x0, &(0x7f0000001880)) connect$packet(r6, &(0x7f00000018c0)={0x11, 0x1a, r2, 0x1, 0x36, 0x6, @random="bde76e2d5d3e"}, 0x14) 00:27:23 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) socket$inet6_icmp(0xa, 0x2, 0x3a) setresgid(r0, r1, 0x0) 00:27:23 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@req={0x28, &(0x7f00000008c0)={'veth1_to_team\x00', @ifru_addrs=@nfc}}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)) 00:27:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) [ 164.246886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.247756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.256527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.260710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:27:23 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") r5 = pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@fscache}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@version_9p2000}, {@access_any}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) setresgid(r0, r1, 0x0) 00:27:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:23 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") pidfd_getfd(r4, r4, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) setresgid(r0, r1, 0x0) 00:27:39 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) pause() pause() syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x3, 0x1, 0x8adac6f91198eb5, 0x81, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xc3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7f, 0xf7, 0xff, 0x1}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x1, [@generic={0xcd, 0x10, 0xb, "ca9f141d86401005642f4c4a2f5de62979f4450d820f39cd5e424f5f824178c5c65ca6f963fc34a3794f4a48b89cb06c5adc1ae9730d80a1f2b0ba056a0a418c2036070242e90e37236858444159fc0d4f02bed538e718365373000ff2e69f4d8070862eab6398c06055ace0735f4e4802319062087b4b6fd3020cccf1a08407f6703cc698266410181401efd42c8c9aaff44ae51a3758774797b87fccdcbc626cbac0c51d250295875657d27c0b9a57b973bf8c8987fa20d386714801bb9106af795c7340fce0ec4f1a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) prctl$PR_GET_THP_DISABLE(0x2a) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3f, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x79}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0xed, 0x0, 0xff, 0x7f}, 0x68, &(0x7f0000000a00)={0x5, 0xf, 0x68, 0x6, [@generic={0x31, 0x10, 0x4, "5d7636209b527e55368a2496d686ced41f6d1d25da973b330350368894b83551bad7e3fa96c88f8b32acaa58c9e5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "989d600c6220b0da49be97126cce0fef"}]}, 0x5, [{0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "8ecd60f086222ddb731ddd640105dd88556a97b75b0ca13c3686ab1984923237583bf218505232288f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x430}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "e31bfae0f556a314c5ad8f59dcc0fcac477a0b83fe64bd34dd46ad37c194ba24774faf3bf2c040a82dc18a71a69f8ff5f16c68dadfbc23343b92fb37f4bee8c49fa5a7b0d819d8a2db5b189b7a3820abec2e584bdfb9c4d7"}}, {0x59, &(0x7f0000000b80)=@string={0x59, 0x3, "fd710a0e0601360d4cdd9373f33cd0871399f9729b7c1153b741c05be79488689fbae7c84fd72724fb6aa744bb0847278e0475b8ff5399b895a99de83ef92bc1c029d889d29c1bd7191cfb03a37a799cf54a8b9c4010a7"}}, {0xa9, &(0x7f0000000c00)=@string={0xa9, 0x3, "37162c6fddbb4198ddc7d3e08c0900ab34e1d0c7ae3e4ad1e7986c027ec7dee8834900762cd5c1c2c544e313d25a058952e98c8a382f09074afda8bb959d4376e35484a4ac36a82fdda3ba97b41a37cc36631a865b2e16552fea715e94e924f5bc3f291753f7d4916a5078f40888a728f28e982d853f0cc1497cf45aea0ecbd8222fb62c9b8689e3d8a3193d075227d70da6bc53ea2e04b08cb55e076b6fff048ad440d7c62bee"}}]}) sysfs$3(0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20640, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000d80)={0x3, "4eac9ad7ff89d678a4fbf9e5a6a70eac4b359d5b1c05fac2103ed14b24dafb87d47206d5ba84342372fc7cf749be90bf2456f2ba13b3c4932ead26464d1371ef"}) syz_open_dev$hidraw(&(0x7f0000000e00), 0x9, 0x80800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x0, "925d0a"}, 0x6) 00:27:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 00:27:39 executing program 2: setpriority(0x2, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x1, 0x1b) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) wait4(0x0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffffe, 0x0, 0x80000001, 0x200, 0x26, 0xffffffff, 0x8}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x9, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/132, 0x84, 0x2, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x3c, 0x0, &(0x7f0000000440)="18cc98901f751bf9e5f66c3fe9a17964391b1553669300d42cd9e45489c66859ed0030ea198e6ab0f18a2f4c878da22902fca6812c000daa6ac3a95a"}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x854) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = fork() wait4(r3, 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8c6b74fc9943e374) 00:27:39 executing program 1: getrusage(0x0, &(0x7f0000000000)) rt_sigpending(&(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000140)) getrusage(0x1, &(0x7f0000000200)) getrusage(0x1, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=""/102) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_set$uid(0x0, r1, 0x4004) getrusage(0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r0, &(0x7f0000000600)={0x11, 0xe7, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) r3 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14, 0x80000) recvfrom$packet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)={0x11, 0x15, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0), 0x42, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001800), 0x40000000, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x1a, r2, 0x1, 0x36, 0x6, @random="bde76e2d5d3e"}, 0x14) 00:27:39 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @in={0x2, 0x4e24, @multicast2}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, @l2tp={0x2, 0x0, @broadcast, 0x2}, 0xe9ea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='batadv_slave_0\x00', 0x79d, 0xffffffff, 0x2}) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)) 00:27:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:39 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") pidfd_getfd(r4, r4, 0x0) setresgid(r0, r1, 0x0) 00:27:39 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:27:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 00:27:39 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000400)="1d9148f085259a5cc8d42f1539c4a211b9396efb0f818910e605460815d8ed564f011aa5357a2fed93df36eb9e42a3e3dfd1606b7c92ed2ea1e876124da77112f8d69e89e4377e2b16bddeeaeba5dfa2b641decfce121fb2b9dc0ba268ae81735cab00656b039615d7a9d325baa1d5345a8312f6cd0d29d7259c0d7fb76322e7620798a423f1bdb4034af79147ca") setresgid(r0, r1, 0x0) 00:27:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) [ 180.237090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.240739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:27:39 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:27:39 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) process_mrelease(r1, 0x0) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)) [ 180.269761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.282931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:27:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fork() sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) [ 183.752430] Bluetooth: hci2: command 0x0406 tx timeout [ 183.752760] Bluetooth: hci1: command 0x0406 tx timeout [ 183.753302] Bluetooth: hci3: command 0x0406 tx timeout [ 183.753354] Bluetooth: hci4: command 0x0406 tx timeout [ 183.754342] Bluetooth: hci5: command 0x0406 tx timeout [ 183.755070] Bluetooth: hci0: command 0x0406 tx timeout [ 183.756035] Bluetooth: hci7: command 0x0406 tx timeout [ 183.756748] Bluetooth: hci6: command 0x0406 tx timeout [ 186.824254] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 186.825100] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.825725] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.826932] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 186.827857] Call Trace: [ 186.828313] [ 186.828999] __schedule+0x893/0x2470 [ 186.829822] ? io_schedule_timeout+0x150/0x150 [ 186.830380] ? do_raw_spin_lock+0x121/0x260 [ 186.830870] ? rwlock_bug.part.0+0x90/0x90 [ 186.831375] schedule+0xda/0x1b0 [ 186.831765] rescuer_thread+0x851/0xdb0 [ 186.832253] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.832808] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.833398] ? lockdep_hardirqs_on+0x79/0x100 [ 186.833906] ? worker_thread+0x1260/0x1260 [ 186.834430] kthread+0x2ed/0x3a0 [ 186.834822] ? kthread_complete_and_exit+0x40/0x40 [ 186.835407] ret_from_fork+0x22/0x30 [ 186.835851] [ 186.836115] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 186.836860] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.837463] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.838356] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 186.839304] Call Trace: [ 186.839594] [ 186.839862] __schedule+0x893/0x2470 [ 186.840337] ? io_schedule_timeout+0x150/0x150 [ 186.840869] ? do_raw_spin_lock+0x121/0x260 [ 186.841391] ? rwlock_bug.part.0+0x90/0x90 [ 186.841884] schedule+0xda/0x1b0 [ 186.842323] rescuer_thread+0x851/0xdb0 [ 186.842788] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.843377] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.843943] ? lockdep_hardirqs_on+0x79/0x100 [ 186.844482] ? worker_thread+0x1260/0x1260 [ 186.844969] kthread+0x2ed/0x3a0 [ 186.845394] ? kthread_complete_and_exit+0x40/0x40 [ 186.845952] ret_from_fork+0x22/0x30 [ 186.846447] [ 186.846720] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 186.847483] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.848076] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.848974] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 186.849924] Call Trace: [ 186.850259] [ 186.850531] __schedule+0x893/0x2470 [ 186.850976] ? io_schedule_timeout+0x150/0x150 [ 186.851516] ? do_raw_spin_lock+0x121/0x260 [ 186.852025] ? rwlock_bug.part.0+0x90/0x90 [ 186.852564] schedule+0xda/0x1b0 [ 186.852969] rescuer_thread+0x851/0xdb0 [ 186.853467] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.854038] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.854649] ? lockdep_hardirqs_on+0x79/0x100 [ 186.855179] ? worker_thread+0x1260/0x1260 [ 186.855721] kthread+0x2ed/0x3a0 [ 186.856124] ? kthread_complete_and_exit+0x40/0x40 [ 186.856711] ret_from_fork+0x22/0x30 [ 186.857159] [ 186.857459] INFO: task netns:6 blocked for more than 143 seconds. [ 186.858145] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.858762] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.859658] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 186.860598] Call Trace: [ 186.860910] [ 186.861179] __schedule+0x893/0x2470 [ 186.861662] ? io_schedule_timeout+0x150/0x150 [ 186.862221] ? do_raw_spin_lock+0x121/0x260 [ 186.862719] ? rwlock_bug.part.0+0x90/0x90 [ 186.863235] schedule+0xda/0x1b0 [ 186.863634] rescuer_thread+0x851/0xdb0 [ 186.864104] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.864688] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.865233] ? lockdep_hardirqs_on+0x79/0x100 [ 186.865662] ? worker_thread+0x1260/0x1260 [ 186.866066] kthread+0x2ed/0x3a0 [ 186.866443] ? kthread_complete_and_exit+0x40/0x40 [ 186.866910] ret_from_fork+0x22/0x30 [ 186.867306] [ 186.867532] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 186.868135] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.868648] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.869373] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 186.870144] Workqueue: 0x0 (rcu_gp) [ 186.870529] Call Trace: [ 186.870775] [ 186.870997] __schedule+0x893/0x2470 [ 186.871410] ? io_schedule_timeout+0x150/0x150 [ 186.871865] schedule+0xda/0x1b0 [ 186.872225] worker_thread+0x15f/0x1260 [ 186.872633] ? process_one_work+0x16a0/0x16a0 [ 186.873070] kthread+0x2ed/0x3a0 [ 186.873431] ? kthread_complete_and_exit+0x40/0x40 [ 186.873903] ret_from_fork+0x22/0x30 [ 186.874317] [ 186.874542] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 186.875151] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.875668] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.876399] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 186.877163] Workqueue: 0x0 (events_highpri) [ 186.877611] Call Trace: [ 186.877850] [ 186.878067] __schedule+0x893/0x2470 [ 186.878476] ? io_schedule_timeout+0x150/0x150 [ 186.878925] schedule+0xda/0x1b0 [ 186.879279] worker_thread+0x15f/0x1260 [ 186.879672] ? process_one_work+0x16a0/0x16a0 [ 186.880103] kthread+0x2ed/0x3a0 [ 186.880450] ? kthread_complete_and_exit+0x40/0x40 [ 186.880915] ret_from_fork+0x22/0x30 [ 186.881317] [ 186.881540] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 186.882164] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.882678] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.883396] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 186.884153] Call Trace: [ 186.884425] [ 186.884645] __schedule+0x893/0x2470 [ 186.885008] ? io_schedule_timeout+0x150/0x150 [ 186.885461] ? do_raw_spin_lock+0x121/0x260 [ 186.885872] ? rwlock_bug.part.0+0x90/0x90 [ 186.886313] schedule+0xda/0x1b0 [ 186.886644] rescuer_thread+0x851/0xdb0 [ 186.887023] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.887515] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.887982] ? lockdep_hardirqs_on+0x79/0x100 [ 186.888444] ? worker_thread+0x1260/0x1260 [ 186.888848] kthread+0x2ed/0x3a0 [ 186.889173] ? kthread_complete_and_exit+0x40/0x40 [ 186.889657] ret_from_fork+0x22/0x30 [ 186.890049] [ 186.890316] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 186.890954] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.891470] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.892162] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 186.892951] Call Trace: [ 186.893220] [ 186.893446] __schedule+0x893/0x2470 [ 186.893808] ? io_schedule_timeout+0x150/0x150 [ 186.894276] ? mark_held_locks+0x9e/0xe0 [ 186.894663] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.895144] schedule+0xda/0x1b0 [ 186.895503] rcu_tasks_one_gp+0x3db/0xc10 [ 186.895917] rcu_tasks_kthread+0x80/0xa0 [ 186.896324] ? rcu_tasks_postscan+0x10/0x10 [ 186.896730] kthread+0x2ed/0x3a0 [ 186.897054] ? kthread_complete_and_exit+0x40/0x40 [ 186.897539] ret_from_fork+0x22/0x30 [ 186.897913] [ 186.898153] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 186.898799] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.899321] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.900022] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 186.900815] Workqueue: 0x0 (kblockd) [ 186.901182] Call Trace: [ 186.901454] [ 186.901677] __schedule+0x893/0x2470 [ 186.902050] ? io_schedule_timeout+0x150/0x150 [ 186.902542] schedule+0xda/0x1b0 [ 186.902875] worker_thread+0x15f/0x1260 [ 186.903302] ? process_one_work+0x16a0/0x16a0 [ 186.903734] kthread+0x2ed/0x3a0 [ 186.904057] ? kthread_complete_and_exit+0x40/0x40 [ 186.904559] ret_from_fork+0x22/0x30 [ 186.904938] [ 186.905162] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 186.905803] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.906329] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.907031] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 186.907828] Call Trace: [ 186.908071] [ 186.908319] __schedule+0x893/0x2470 [ 186.908693] ? io_schedule_timeout+0x150/0x150 [ 186.909121] ? do_raw_spin_lock+0x121/0x260 [ 186.909560] ? rwlock_bug.part.0+0x90/0x90 [ 186.909970] schedule+0xda/0x1b0 [ 186.910355] rescuer_thread+0x851/0xdb0 [ 186.910742] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.911241] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.911715] ? lockdep_hardirqs_on+0x79/0x100 [ 186.912152] ? worker_thread+0x1260/0x1260 [ 186.912589] kthread+0x2ed/0x3a0 [ 186.912922] ? kthread_complete_and_exit+0x40/0x40 [ 186.913414] ret_from_fork+0x22/0x30 [ 186.913790] [ 186.914086] [ 186.914086] Showing all locks held in the system: [ 186.914683] 1 lock held by rcu_tasks_kthre/11: [ 186.915111] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 186.916045] 1 lock held by khungtaskd/25: [ 186.916452] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 186.917325] 1 lock held by systemd-journal/112: [ 186.917759] 1 lock held by in:imklog/189: [ 186.918163] #0: ffff88800ea0a868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 186.918984] 3 locks held by rs:main Q:Reg/190: [ 186.919428] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 186.920229] #1: ffff88800ff2c438 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x127/0x250 [ 186.921016] #2: ffff88801be03fa0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 [ 186.922028] 2 locks held by syz-executor/4168: [ 186.922481] [ 186.922648] ============================================= [ 186.922648] 00:27:55 executing program 1: getrusage(0x0, &(0x7f0000000000)) rt_sigpending(&(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000140)) getrusage(0x1, &(0x7f0000000200)) getrusage(0x1, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=""/102) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_set$uid(0x0, r1, 0x4004) getrusage(0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r0, &(0x7f0000000600)={0x11, 0xe7, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) r3 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14, 0x80000) recvfrom$packet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)={0x11, 0x15, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) openat$vcs(0xffffffffffffff9c, &(0x7f00000017c0), 0x42, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x1a, r2, 0x1, 0x36, 0x6, @random="bde76e2d5d3e"}, 0x14) 00:27:55 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) pause() pause() syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x3, 0x1, 0x8adac6f91198eb5, 0x81, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xc3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7f, 0xf7, 0xff, 0x1}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x1, [@generic={0xcd, 0x10, 0xb, "ca9f141d86401005642f4c4a2f5de62979f4450d820f39cd5e424f5f824178c5c65ca6f963fc34a3794f4a48b89cb06c5adc1ae9730d80a1f2b0ba056a0a418c2036070242e90e37236858444159fc0d4f02bed538e718365373000ff2e69f4d8070862eab6398c06055ace0735f4e4802319062087b4b6fd3020cccf1a08407f6703cc698266410181401efd42c8c9aaff44ae51a3758774797b87fccdcbc626cbac0c51d250295875657d27c0b9a57b973bf8c8987fa20d386714801bb9106af795c7340fce0ec4f1a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) prctl$PR_GET_THP_DISABLE(0x2a) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3f, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x79}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0xed, 0x0, 0xff, 0x7f}, 0x68, &(0x7f0000000a00)={0x5, 0xf, 0x68, 0x6, [@generic={0x31, 0x10, 0x4, "5d7636209b527e55368a2496d686ced41f6d1d25da973b330350368894b83551bad7e3fa96c88f8b32acaa58c9e5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "989d600c6220b0da49be97126cce0fef"}]}, 0x5, [{0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "8ecd60f086222ddb731ddd640105dd88556a97b75b0ca13c3686ab1984923237583bf218505232288f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x430}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "e31bfae0f556a314c5ad8f59dcc0fcac477a0b83fe64bd34dd46ad37c194ba24774faf3bf2c040a82dc18a71a69f8ff5f16c68dadfbc23343b92fb37f4bee8c49fa5a7b0d819d8a2db5b189b7a3820abec2e584bdfb9c4d7"}}, {0x59, &(0x7f0000000b80)=@string={0x59, 0x3, "fd710a0e0601360d4cdd9373f33cd0871399f9729b7c1153b741c05be79488689fbae7c84fd72724fb6aa744bb0847278e0475b8ff5399b895a99de83ef92bc1c029d889d29c1bd7191cfb03a37a799cf54a8b9c4010a7"}}, {0xa9, &(0x7f0000000c00)=@string={0xa9, 0x3, "37162c6fddbb4198ddc7d3e08c0900ab34e1d0c7ae3e4ad1e7986c027ec7dee8834900762cd5c1c2c544e313d25a058952e98c8a382f09074afda8bb959d4376e35484a4ac36a82fdda3ba97b41a37cc36631a865b2e16552fea715e94e924f5bc3f291753f7d4916a5078f40888a728f28e982d853f0cc1497cf45aea0ecbd8222fb62c9b8689e3d8a3193d075227d70da6bc53ea2e04b08cb55e076b6fff048ad440d7c62bee"}}]}) sysfs$3(0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20640, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000d80)={0x3, "4eac9ad7ff89d678a4fbf9e5a6a70eac4b359d5b1c05fac2103ed14b24dafb87d47206d5ba84342372fc7cf749be90bf2456f2ba13b3c4932ead26464d1371ef"}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x0, "925d0a"}, 0x6) 00:27:55 executing program 2: setpriority(0x2, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x1, 0x1b) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) wait4(0x0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfffffffe, 0x0, 0x80000001, 0x200, 0x26, 0xffffffff, 0x8}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x9, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/132, 0x84, 0x2, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x3c, 0x0, &(0x7f0000000440)="18cc98901f751bf9e5f66c3fe9a17964391b1553669300d42cd9e45489c66859ed0030ea198e6ab0f18a2f4c878da22902fca6812c000daa6ac3a95a"}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x854) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = fork() wait4(r3, 0x0, 0x40000000, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8c6b74fc9943e374) 00:27:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 00:27:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044005}, 0x20048045) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:55 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)) 00:27:55 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:27:55 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c0c0, 0x0) setresgid(r0, r1, 0x0) 00:27:55 executing program 0: setfsgid(0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)}], 0x5}, 0x10000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x26, 0x400, 0x68, @mcast1, @private2, 0x40, 0x8000, 0x101, 0xfffffffa}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x6, @any, 0xf716}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000740)={0x5, 0x1a, 0x9, 0x3f, 0x6, 0x8, 0x3a3}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x0) socketpair(0x1f, 0x3, 0x7b283844, &(0x7f0000000940)) [ 196.728961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.730086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.736895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.742274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:27:55 executing program 4: setresgid(0xee00, 0xee00, 0xee01) setfsgid(0xee00) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r0, 0xee01, 0xee01) setfsgid(r1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@cache_none}, {@cache_loose}, {@cache_none}, {@noextend}, {@mmap}, {@access_client}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'+(\\'}}, {@obj_role={'obj_role', 0x3d, 'L/$*&w(}'}}, {@euid_lt={'euid<', r3}}, {@permit_directio}]}}) setresgid(r0, r1, 0x0) 00:27:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd27, 0x46e25904, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:27:55 executing program 7: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x503900, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/216) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000480)={0x100, 0x3, 0x6, 0x9, 0x10001, 0xf06}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2001, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x1, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x8001, 0x8, 0x3, 0x0, 0x1, 0x7}, 0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580)={0x6, "6f5f1e"}, 0x6) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x30, 0x0, &(0x7f0000000640)=[@dead_binder_done, @enter_looper, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000680)="5ccc04d645646f19b0e5786df6f230f8566dee880ad11cfbe3d74378334c83f1847fac28ce1e1b9cda65fc8492d87501e1e4bcb0bb58f0a880af4bbd44e2c88bc80d1e9fda7ab6cd8691c0d0b8487da98f"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/173) openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) 00:27:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000400)=""/28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xcc}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x46}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x400c000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xde}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) VM DIAGNOSIS: 00:27:46 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88801637c000 RCX=ffffffff815e49ac RDX=1ffffd40000cf11f RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea00006788c0 RSP=ffff888018987a50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000080000001 R11=0000000000000001 R12=0000000000000293 R13=ffff888017e03690 R14=ffff8880087fc000 R15=0000000000000000 RIP=ffffffff81460904 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9854b91900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9853fa9310 CR3=000000000ee0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 6f4e202020202020 3d4547415353454d YMM01=0000000000000000 0000000000000000 2d3763722d302e30 2e36206465746e69 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 d7391010f192f9d1 0000000000137948 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 4de59ad51e3ff25c 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055da3234dc00 CR3=000000001d592000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fff6f09d400 0000003000000010 YMM02=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM03=0000000000000000 0000000000000000 7500736461657268 742e70756f726763 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000007 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 703e2d73004c4149 54494e495f544e45 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000