Warning: Permanently added '[localhost]:27160' (ECDSA) to the list of known hosts. 2022/10/04 00:08:02 fuzzer started 2022/10/04 00:08:03 dialing manager at localhost:35095 syzkaller login: [ 36.713088] cgroup: Unknown subsys name 'net' [ 36.822689] cgroup: Unknown subsys name 'rlimit' 2022/10/04 00:08:18 syscalls: 210 2022/10/04 00:08:18 code coverage: enabled 2022/10/04 00:08:18 comparison tracing: enabled 2022/10/04 00:08:18 extra coverage: enabled 2022/10/04 00:08:18 setuid sandbox: enabled 2022/10/04 00:08:18 namespace sandbox: enabled 2022/10/04 00:08:18 Android sandbox: enabled 2022/10/04 00:08:18 fault injection: enabled 2022/10/04 00:08:18 leak checking: enabled 2022/10/04 00:08:18 net packet injection: enabled 2022/10/04 00:08:18 net device setup: enabled 2022/10/04 00:08:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 00:08:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 00:08:18 USB emulation: enabled 2022/10/04 00:08:18 hci packet injection: enabled 2022/10/04 00:08:18 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 00:08:18 802.15.4 emulation: enabled 2022/10/04 00:08:18 fetching corpus: 0, signal 0/0 (executing program) 2022/10/04 00:08:19 starting 8 fuzzer processes 00:08:19 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0840, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x0, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) io_uring_setup(0x63fd, &(0x7f0000000280)={0x0, 0xe0e3, 0x20, 0x1, 0x3ac, 0x0, r1}) r3 = socket(0x0, 0x5, 0x5fd) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) timerfd_gettime(r0, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) connect$802154_dgram(r3, &(0x7f00000004c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0xbd5b7f94930f1050, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000540)={0x13}) 00:08:19 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 00:08:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x38}}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}}, 0x4000) clock_gettime(0x7, &(0x7f0000000a80)) 00:08:19 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000008c0)=""/252) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) semget$private(0x0, 0x0, 0x208) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) [ 52.651959] audit: type=1400 audit(1664842099.866:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:08:19 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000007c0)={'\x00', 0x9, 0x1, 0x1}) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) 00:08:19 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48010) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) 00:08:19 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:08:19 executing program 7: r0 = getuid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, r0, 0x0, r2, 0xffffffffffffffff, 0x4, 0x7}, 0x0, 0x0, 0xaf09, 0xfffffffffffffff8, 0xe46, 0x9, 0x7, 0x0, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}) r4 = msgget(0x1, 0x38) msgctl$IPC_RMID(r4, 0x0) msgsnd(r4, &(0x7f0000000140)={0x1, "34c6409a70859a48377b5fb48674b3276f80efdf03be8c30571b364a255ad46828d28c99d830d3ca4b29cd9c62bb4e80a4caaa36543605ebcf2cfe08f8c76d9bbae5aa4a8f2a9749b604b456af42201c8cfa19e28591d9f03deceebd27d66fd4bb01123b36d0136ee9c82b8e65601ebe624903fdbcceafe64bd912010bef9eaf417a98b8ea66ae9d2bd35915fe33930241d4af4f77a6ff7389ab8c9a5d4f77e9c4"}, 0xa9, 0x0) msgsnd(r4, &(0x7f0000000200)={0x3, "0f23bf7cc89a19ca6521cd1739d23b112791e8f20057c0fd4e4ab871d3c7aeb7bfd416967a7af0740bf4b1a3f56a0ea9cf0e1b580668083f726405e1312f46f385aa7e36e49012077a81039885bf92dadc66823cd6579d8a8c3eb6d2c3e81475682ac49a00b8a9f66f667e481b60d616dad09974802e"}, 0x7e, 0x800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000280)={0x24, @none={0x0, 0x3}}, 0x14) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r7 = gettid() r8 = gettid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x1, r3, 0xffffffffffffffff, r1, r6, 0x1, 0x480}, 0x0, 0x0, 0x3, 0x2e, 0x1, 0x6, 0x7f, 0x1f, 0x0, 0x0, r7, r8}) timerfd_create(0x7, 0x0) r9 = msgget$private(0x0, 0x28) msgsnd(r9, &(0x7f0000000400)={0x2, "2d0fce57bc1d4a9b25914ec16cb264acfa09d5280fd38c86b9b43ea840de29c506368fd9ea287c3b749ab52aca984e9028da190fdec80c7785547f7dae9b6c14fb50ad464edfeabb2c878f80f3578260fcec97e6ea1b941c992b84629b5a90be146ee471109d7beac38dade78529dd774dcc2f9cac44909028100ca52151b172"}, 0x88, 0x800) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) gettid() msgctl$IPC_RMID(r4, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000540)={r8}) [ 54.057268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.058908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.061333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.063029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.065138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.067116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.068720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.087899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.089194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.090726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.091853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.099212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.100786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.103321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.108565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.109944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.112984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.114175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.115656] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.117833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.119216] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.120543] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.121832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.123351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.124824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.131173] Bluetooth: hci1: HCI_REQ-0x0c1a [ 54.132669] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.138435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.139729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.140986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.142645] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.145916] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.160273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.175646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.179244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.180766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.183622] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.185098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.190839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.193934] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.195037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.198116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.199474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.201795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.202557] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.210678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.210747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.214663] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.226660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.230275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.234084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.238783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.240343] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.242164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.246978] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.266493] Bluetooth: hci7: HCI_REQ-0x0c1a [ 56.181971] Bluetooth: hci3: command 0x0409 tx timeout [ 56.183059] Bluetooth: hci0: command 0x0409 tx timeout [ 56.184000] Bluetooth: hci1: command 0x0409 tx timeout [ 56.184909] Bluetooth: hci2: command 0x0409 tx timeout [ 56.245556] Bluetooth: hci5: command 0x0409 tx timeout [ 56.246624] Bluetooth: hci4: command 0x0409 tx timeout [ 56.309527] Bluetooth: hci7: command 0x0409 tx timeout [ 56.310543] Bluetooth: hci6: command 0x0409 tx timeout [ 58.229595] Bluetooth: hci2: command 0x041b tx timeout [ 58.230455] Bluetooth: hci1: command 0x041b tx timeout [ 58.231216] Bluetooth: hci0: command 0x041b tx timeout [ 58.232330] Bluetooth: hci3: command 0x041b tx timeout [ 58.293540] Bluetooth: hci4: command 0x041b tx timeout [ 58.294309] Bluetooth: hci5: command 0x041b tx timeout [ 58.357619] Bluetooth: hci6: command 0x041b tx timeout [ 58.358317] Bluetooth: hci7: command 0x041b tx timeout [ 60.277499] Bluetooth: hci3: command 0x040f tx timeout [ 60.277956] Bluetooth: hci0: command 0x040f tx timeout [ 60.278359] Bluetooth: hci1: command 0x040f tx timeout [ 60.278981] Bluetooth: hci2: command 0x040f tx timeout [ 60.341554] Bluetooth: hci5: command 0x040f tx timeout [ 60.341990] Bluetooth: hci4: command 0x040f tx timeout [ 60.405512] Bluetooth: hci7: command 0x040f tx timeout [ 60.405936] Bluetooth: hci6: command 0x040f tx timeout [ 62.325541] Bluetooth: hci2: command 0x0419 tx timeout [ 62.325997] Bluetooth: hci1: command 0x0419 tx timeout [ 62.326447] Bluetooth: hci0: command 0x0419 tx timeout [ 62.326850] Bluetooth: hci3: command 0x0419 tx timeout [ 62.389612] Bluetooth: hci4: command 0x0419 tx timeout [ 62.390083] Bluetooth: hci5: command 0x0419 tx timeout [ 62.453513] Bluetooth: hci6: command 0x0419 tx timeout [ 62.453981] Bluetooth: hci7: command 0x0419 tx timeout 00:09:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000008c0)=""/252) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) semget$private(0x0, 0x0, 0x208) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) 00:09:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000008c0)=""/252) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) semget$private(0x0, 0x0, 0x208) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) 00:09:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000008c0)=""/252) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) semget$private(0x0, 0x0, 0x208) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) [ 108.823773] Unsupported ieee802154 address type: 0 [ 108.831290] Unsupported ieee802154 address type: 0 00:09:16 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000008c0)=""/252) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) semget$private(0x0, 0x0, 0x208) 00:09:16 executing program 7: r0 = getuid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, r0, 0x0, r2, 0xffffffffffffffff, 0x4, 0x7}, 0x0, 0x0, 0xaf09, 0xfffffffffffffff8, 0xe46, 0x9, 0x7, 0x0, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}) r4 = msgget(0x1, 0x38) msgctl$IPC_RMID(r4, 0x0) msgsnd(r4, &(0x7f0000000140)={0x1, "34c6409a70859a48377b5fb48674b3276f80efdf03be8c30571b364a255ad46828d28c99d830d3ca4b29cd9c62bb4e80a4caaa36543605ebcf2cfe08f8c76d9bbae5aa4a8f2a9749b604b456af42201c8cfa19e28591d9f03deceebd27d66fd4bb01123b36d0136ee9c82b8e65601ebe624903fdbcceafe64bd912010bef9eaf417a98b8ea66ae9d2bd35915fe33930241d4af4f77a6ff7389ab8c9a5d4f77e9c4"}, 0xa9, 0x0) msgsnd(r4, &(0x7f0000000200)={0x3, "0f23bf7cc89a19ca6521cd1739d23b112791e8f20057c0fd4e4ab871d3c7aeb7bfd416967a7af0740bf4b1a3f56a0ea9cf0e1b580668083f726405e1312f46f385aa7e36e49012077a81039885bf92dadc66823cd6579d8a8c3eb6d2c3e81475682ac49a00b8a9f66f667e481b60d616dad09974802e"}, 0x7e, 0x800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000280)={0x24, @none={0x0, 0x3}}, 0x14) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r7 = gettid() r8 = gettid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x1, r3, 0xffffffffffffffff, r1, r6, 0x1, 0x480}, 0x0, 0x0, 0x3, 0x2e, 0x1, 0x6, 0x7f, 0x1f, 0x0, 0x0, r7, r8}) timerfd_create(0x7, 0x0) r9 = msgget$private(0x0, 0x28) msgsnd(r9, &(0x7f0000000400)={0x2, "2d0fce57bc1d4a9b25914ec16cb264acfa09d5280fd38c86b9b43ea840de29c506368fd9ea287c3b749ab52aca984e9028da190fdec80c7785547f7dae9b6c14fb50ad464edfeabb2c878f80f3578260fcec97e6ea1b941c992b84629b5a90be146ee471109d7beac38dade78529dd774dcc2f9cac44909028100ca52151b172"}, 0x88, 0x800) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) gettid() msgctl$IPC_RMID(r4, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000540)={r8}) [ 108.948761] Unsupported ieee802154 address type: 0 00:09:16 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000008c0)=""/252) semget$private(0x0, 0x0, 0x208) 00:09:16 executing program 7: r0 = getuid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, r0, 0x0, r2, 0xffffffffffffffff, 0x4, 0x7}, 0x0, 0x0, 0xaf09, 0xfffffffffffffff8, 0xe46, 0x9, 0x7, 0x0, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}) r4 = msgget(0x1, 0x38) msgctl$IPC_RMID(r4, 0x0) msgsnd(r4, &(0x7f0000000140)={0x1, "34c6409a70859a48377b5fb48674b3276f80efdf03be8c30571b364a255ad46828d28c99d830d3ca4b29cd9c62bb4e80a4caaa36543605ebcf2cfe08f8c76d9bbae5aa4a8f2a9749b604b456af42201c8cfa19e28591d9f03deceebd27d66fd4bb01123b36d0136ee9c82b8e65601ebe624903fdbcceafe64bd912010bef9eaf417a98b8ea66ae9d2bd35915fe33930241d4af4f77a6ff7389ab8c9a5d4f77e9c4"}, 0xa9, 0x0) msgsnd(r4, &(0x7f0000000200)={0x3, "0f23bf7cc89a19ca6521cd1739d23b112791e8f20057c0fd4e4ab871d3c7aeb7bfd416967a7af0740bf4b1a3f56a0ea9cf0e1b580668083f726405e1312f46f385aa7e36e49012077a81039885bf92dadc66823cd6579d8a8c3eb6d2c3e81475682ac49a00b8a9f66f667e481b60d616dad09974802e"}, 0x7e, 0x800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000280)={0x24, @none={0x0, 0x3}}, 0x14) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r7 = gettid() r8 = gettid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x1, r3, 0xffffffffffffffff, r1, r6, 0x1, 0x480}, 0x0, 0x0, 0x3, 0x2e, 0x1, 0x6, 0x7f, 0x1f, 0x0, 0x0, r7, r8}) timerfd_create(0x7, 0x0) r9 = msgget$private(0x0, 0x28) msgsnd(r9, &(0x7f0000000400)={0x2, "2d0fce57bc1d4a9b25914ec16cb264acfa09d5280fd38c86b9b43ea840de29c506368fd9ea287c3b749ab52aca984e9028da190fdec80c7785547f7dae9b6c14fb50ad464edfeabb2c878f80f3578260fcec97e6ea1b941c992b84629b5a90be146ee471109d7beac38dade78529dd774dcc2f9cac44909028100ca52151b172"}, 0x88, 0x800) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) gettid() msgctl$IPC_RMID(r4, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000540)={r8}) 00:09:16 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000007c0)={'\x00', 0x9, 0x1, 0x1}) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) [ 109.075175] Unsupported ieee802154 address type: 0 00:09:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x38}}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}}, 0x4000) clock_gettime(0x7, &(0x7f0000000a80)) 00:09:34 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0840, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x0, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) io_uring_setup(0x63fd, &(0x7f0000000280)={0x0, 0xe0e3, 0x20, 0x1, 0x3ac, 0x0, r1}) r3 = socket(0x0, 0x5, 0x5fd) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) timerfd_gettime(r0, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) connect$802154_dgram(r3, &(0x7f00000004c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0xbd5b7f94930f1050, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000540)={0x13}) 00:09:34 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semget$private(0x0, 0x0, 0x208) 00:09:34 executing program 7: r0 = getuid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, r0, 0x0, r2, 0xffffffffffffffff, 0x4, 0x7}, 0x0, 0x0, 0xaf09, 0xfffffffffffffff8, 0xe46, 0x9, 0x7, 0x0, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}) r4 = msgget(0x1, 0x38) msgctl$IPC_RMID(r4, 0x0) msgsnd(r4, &(0x7f0000000140)={0x1, "34c6409a70859a48377b5fb48674b3276f80efdf03be8c30571b364a255ad46828d28c99d830d3ca4b29cd9c62bb4e80a4caaa36543605ebcf2cfe08f8c76d9bbae5aa4a8f2a9749b604b456af42201c8cfa19e28591d9f03deceebd27d66fd4bb01123b36d0136ee9c82b8e65601ebe624903fdbcceafe64bd912010bef9eaf417a98b8ea66ae9d2bd35915fe33930241d4af4f77a6ff7389ab8c9a5d4f77e9c4"}, 0xa9, 0x0) msgsnd(r4, &(0x7f0000000200)={0x3, "0f23bf7cc89a19ca6521cd1739d23b112791e8f20057c0fd4e4ab871d3c7aeb7bfd416967a7af0740bf4b1a3f56a0ea9cf0e1b580668083f726405e1312f46f385aa7e36e49012077a81039885bf92dadc66823cd6579d8a8c3eb6d2c3e81475682ac49a00b8a9f66f667e481b60d616dad09974802e"}, 0x7e, 0x800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000280)={0x24, @none={0x0, 0x3}}, 0x14) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r7 = gettid() r8 = gettid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x1, r3, 0xffffffffffffffff, r1, r6, 0x1, 0x480}, 0x0, 0x0, 0x3, 0x2e, 0x1, 0x6, 0x7f, 0x1f, 0x0, 0x0, r7, r8}) timerfd_create(0x7, 0x0) r9 = msgget$private(0x0, 0x28) msgsnd(r9, &(0x7f0000000400)={0x2, "2d0fce57bc1d4a9b25914ec16cb264acfa09d5280fd38c86b9b43ea840de29c506368fd9ea287c3b749ab52aca984e9028da190fdec80c7785547f7dae9b6c14fb50ad464edfeabb2c878f80f3578260fcec97e6ea1b941c992b84629b5a90be146ee471109d7beac38dade78529dd774dcc2f9cac44909028100ca52151b172"}, 0x88, 0x800) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) gettid() msgctl$IPC_RMID(r4, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000540)={r8}) 00:09:34 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000007c0)={'\x00', 0x9, 0x1, 0x1}) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) 00:09:34 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 00:09:34 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48010) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) 00:09:34 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) [ 127.701042] Unsupported ieee802154 address type: 0 00:09:34 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:09:34 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 00:09:34 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) semget$private(0x0, 0x0, 0x208) 00:09:35 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semget$private(0x0, 0x0, 0x208) 00:09:49 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0840, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x0, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) io_uring_setup(0x63fd, &(0x7f0000000280)={0x0, 0xe0e3, 0x20, 0x1, 0x3ac, 0x0, r1}) r3 = socket(0x0, 0x5, 0x5fd) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) timerfd_gettime(r0, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) connect$802154_dgram(r3, &(0x7f00000004c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0xbd5b7f94930f1050, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000540)={0x13}) 00:09:49 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semget$private(0x0, 0x0, 0x208) 00:09:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x38}}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}}, 0x4000) clock_gettime(0x7, &(0x7f0000000a80)) 00:09:49 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 00:09:49 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48010) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) 00:09:49 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) semget$private(0x0, 0x0, 0x208) 00:09:49 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:09:49 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000007c0)={'\x00', 0x9, 0x1, 0x1}) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) 00:09:49 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) semget$private(0x0, 0x0, 0x208) 00:09:49 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:09:49 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) 00:09:49 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) semget$private(0x0, 0x0, 0x208) 00:09:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x38}}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}}, 0x4000) clock_gettime(0x7, &(0x7f0000000a80)) 00:10:02 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0840, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x0, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) io_uring_setup(0x63fd, &(0x7f0000000280)={0x0, 0xe0e3, 0x20, 0x1, 0x3ac, 0x0, r1}) r3 = socket(0x0, 0x5, 0x5fd) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) timerfd_gettime(r0, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) connect$802154_dgram(r3, &(0x7f00000004c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0xbd5b7f94930f1050, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000540)={0x13}) 00:10:02 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48010) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) 00:10:02 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000880)=0x2e) 00:10:02 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) 00:10:02 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) semget$private(0x0, 0x0, 0x208) 00:10:02 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:10:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x38}}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x7, &(0x7f0000000a80)) 00:10:02 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000007c0)={'\x00', 0x9, 0x1, 0x1}) 00:10:02 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48010) 00:10:02 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x200200, 0x0) 00:10:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x38}}, 0x1) clock_gettime(0x7, &(0x7f0000000a80)) 00:10:02 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) r7 = mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) mq_getsetattr(r7, &(0x7f0000000880)={0x4, 0x76, 0x7, 0xd0f}, &(0x7f00000008c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:10:02 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x6) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) 00:10:02 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @none={0x0, 0x2}}, 0x14) 00:10:02 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) semget$private(0x0, 0x0, 0x208) 00:10:02 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r6, 0x400448de, &(0x7f0000001580)="82c04ba0efe278236f473ba4f850da020cbc943fdc588cb338696bdceee127d5e038371c1cae5e1913fd988810556ec87189efab5fd796736ea8a46ecf34d31d318372df60a81f072c0d8fc879e693f4126d15774c383f655f2ec408adf1298c25cd4db184973d40") syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) 00:10:16 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0840, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x0, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) io_uring_setup(0x63fd, &(0x7f0000000280)={0x0, 0xe0e3, 0x20, 0x1, 0x3ac, 0x0, r1}) r3 = socket(0x0, 0x5, 0x5fd) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) timerfd_gettime(r0, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) connect$802154_dgram(r3, &(0x7f00000004c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0xbd5b7f94930f1050, 0x0) 00:10:16 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) 00:10:16 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) semget$private(0x0, 0x0, 0x208) 00:10:16 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:10:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x7, &(0x7f0000000a80)) 00:10:16 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:10:16 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) 00:10:16 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 00:10:16 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r5) 00:10:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) clock_gettime(0x7, &(0x7f0000000a80)) 00:10:16 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:10:16 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) semget$private(0x0, 0x0, 0x208) [ 179.637585] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 179.638867] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.639794] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.641050] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.643082] Call Trace: [ 179.643891] [ 179.644270] __schedule+0x893/0x2470 [ 179.644867] ? io_schedule_timeout+0x150/0x150 [ 179.645562] ? do_raw_spin_lock+0x121/0x260 [ 179.646236] ? rwlock_bug.part.0+0x90/0x90 [ 179.646898] schedule+0xda/0x1b0 [ 179.647430] rescuer_thread+0x851/0xdb0 [ 179.648029] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.648788] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.649540] ? lockdep_hardirqs_on+0x79/0x100 [ 179.650239] ? worker_thread+0x1260/0x1260 [ 179.650905] kthread+0x2ed/0x3a0 [ 179.651441] ? kthread_complete_and_exit+0x40/0x40 [ 179.652181] ret_from_fork+0x22/0x30 [ 179.652818] [ 179.653168] INFO: task rcu_par_gp:4 blocked for more than 142 seconds. [ 179.654167] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.654959] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.656095] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.657325] Call Trace: [ 179.657732] [ 179.658108] __schedule+0x893/0x2470 [ 179.658721] ? io_schedule_timeout+0x150/0x150 [ 179.659431] ? do_raw_spin_lock+0x121/0x260 [ 179.660088] ? rwlock_bug.part.0+0x90/0x90 [ 179.660774] schedule+0xda/0x1b0 [ 179.661300] rescuer_thread+0x851/0xdb0 [ 179.661940] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.662765] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.663548] ? lockdep_hardirqs_on+0x79/0x100 [ 179.664234] ? worker_thread+0x1260/0x1260 [ 179.664896] kthread+0x2ed/0x3a0 [ 179.665436] ? kthread_complete_and_exit+0x40/0x40 [ 179.666201] ret_from_fork+0x22/0x30 [ 179.666816] [ 179.667167] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.668148] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.668957] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.670122] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.671374] Call Trace: [ 179.671783] [ 179.672135] __schedule+0x893/0x2470 [ 179.672744] ? io_schedule_timeout+0x150/0x150 [ 179.673448] ? do_raw_spin_lock+0x121/0x260 [ 179.674149] ? rwlock_bug.part.0+0x90/0x90 [ 179.674835] schedule+0xda/0x1b0 [ 179.675356] rescuer_thread+0x851/0xdb0 [ 179.675994] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.676774] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.677546] ? lockdep_hardirqs_on+0x79/0x100 [ 179.678263] ? worker_thread+0x1260/0x1260 [ 179.678933] kthread+0x2ed/0x3a0 [ 179.679489] ? kthread_complete_and_exit+0x40/0x40 [ 179.680229] ret_from_fork+0x22/0x30 [ 179.680847] [ 179.681199] INFO: task netns:6 blocked for more than 143 seconds. [ 179.682165] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.682981] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.684126] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.685360] Call Trace: [ 179.685766] [ 179.686139] __schedule+0x893/0x2470 [ 179.686750] ? io_schedule_timeout+0x150/0x150 [ 179.687463] ? do_raw_spin_lock+0x121/0x260 [ 179.688126] ? rwlock_bug.part.0+0x90/0x90 [ 179.688801] schedule+0xda/0x1b0 [ 179.689331] rescuer_thread+0x851/0xdb0 [ 179.689957] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.690761] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.691525] ? lockdep_hardirqs_on+0x79/0x100 [ 179.692206] ? worker_thread+0x1260/0x1260 [ 179.692872] kthread+0x2ed/0x3a0 [ 179.693417] ? kthread_complete_and_exit+0x40/0x40 [ 179.694187] ret_from_fork+0x22/0x30 [ 179.694810] [ 179.695166] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 179.696149] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.696954] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.698154] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.699415] Workqueue: 0x0 (rcu_gp) [ 179.699994] Call Trace: [ 179.700376] [ 179.700751] __schedule+0x893/0x2470 [ 179.701337] ? io_schedule_timeout+0x150/0x150 [ 179.702107] schedule+0xda/0x1b0 [ 179.702669] worker_thread+0x15f/0x1260 [ 179.703300] ? process_one_work+0x16a0/0x16a0 [ 179.704009] kthread+0x2ed/0x3a0 [ 179.704550] ? kthread_complete_and_exit+0x40/0x40 [ 179.705291] ret_from_fork+0x22/0x30 [ 179.705904] [ 179.706299] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.707299] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.708110] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.709235] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 179.710511] Workqueue: 0x0 (events_highpri) [ 179.711182] Call Trace: [ 179.711599] [ 179.711954] __schedule+0x893/0x2470 [ 179.712564] ? io_schedule_timeout+0x150/0x150 [ 179.713265] schedule+0xda/0x1b0 [ 179.713816] worker_thread+0x15f/0x1260 [ 179.714521] ? process_one_work+0x16a0/0x16a0 [ 179.715213] kthread+0x2ed/0x3a0 [ 179.715758] ? kthread_complete_and_exit+0x40/0x40 [ 179.716516] ret_from_fork+0x22/0x30 [ 179.717100] [ 179.717488] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.718515] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.719292] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.720433] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.721667] Call Trace: [ 179.722081] [ 179.722470] __schedule+0x893/0x2470 [ 179.723054] ? io_schedule_timeout+0x150/0x150 [ 179.723755] ? do_raw_spin_lock+0x121/0x260 [ 179.724430] ? rwlock_bug.part.0+0x90/0x90 [ 179.725083] schedule+0xda/0x1b0 [ 179.725634] rescuer_thread+0x851/0xdb0 [ 179.726274] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.727053] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.727830] ? lockdep_hardirqs_on+0x79/0x100 [ 179.728547] ? worker_thread+0x1260/0x1260 [ 179.729191] kthread+0x2ed/0x3a0 [ 179.729737] ? kthread_complete_and_exit+0x40/0x40 [ 179.730528] ret_from_fork+0x22/0x30 [ 179.731120] [ 179.731539] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.732593] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.733363] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.734534] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.735777] Call Trace: [ 179.736158] [ 179.736530] __schedule+0x893/0x2470 [ 179.737107] ? io_schedule_timeout+0x150/0x150 [ 179.737821] ? mark_held_locks+0x9e/0xe0 [ 179.738486] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.739233] schedule+0xda/0x1b0 [ 179.739785] rcu_tasks_one_gp+0x3db/0xc10 [ 179.740476] rcu_tasks_kthread+0x80/0xa0 [ 179.741086] ? rcu_tasks_postscan+0x10/0x10 [ 179.741761] kthread+0x2ed/0x3a0 [ 179.742331] ? kthread_complete_and_exit+0x40/0x40 [ 179.743106] ret_from_fork+0x22/0x30 [ 179.743722] [ 179.770507] Bluetooth: hci0: command 0x0406 tx timeout [ 179.770540] Bluetooth: hci3: command 0x0406 tx timeout [ 179.770947] Bluetooth: hci1: command 0x0406 tx timeout [ 179.771758] Bluetooth: hci5: command 0x0406 tx timeout [ 179.772131] Bluetooth: hci6: command 0x0406 tx timeout [ 179.772899] Bluetooth: hci2: command 0x0406 tx timeout [ 179.773269] Bluetooth: hci7: command 0x0406 tx timeout [ 179.774096] Bluetooth: hci4: command 0x0406 tx timeout [ 179.775795] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.776308] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.776736] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.777310] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 179.777953] Workqueue: 0x0 (kblockd) [ 179.778262] Call Trace: [ 179.778480] [ 179.778660] __schedule+0x893/0x2470 [ 179.778967] ? io_schedule_timeout+0x150/0x150 [ 179.779334] schedule+0xda/0x1b0 [ 179.779623] worker_thread+0x15f/0x1260 [ 179.779951] ? process_one_work+0x16a0/0x16a0 [ 179.780305] kthread+0x2ed/0x3a0 [ 179.780590] ? kthread_complete_and_exit+0x40/0x40 [ 179.780971] ret_from_fork+0x22/0x30 [ 179.781279] [ 179.781478] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.781983] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.782410] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.782995] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.783638] Call Trace: [ 179.783838] [ 179.784020] __schedule+0x893/0x2470 [ 179.784324] ? io_schedule_timeout+0x150/0x150 [ 179.784706] ? do_raw_spin_lock+0x121/0x260 [ 179.785045] ? rwlock_bug.part.0+0x90/0x90 [ 179.785386] schedule+0xda/0x1b0 [ 179.785672] rescuer_thread+0x851/0xdb0 [ 179.786001] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.786426] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.786821] ? lockdep_hardirqs_on+0x79/0x100 [ 179.787173] ? worker_thread+0x1260/0x1260 [ 179.787527] kthread+0x2ed/0x3a0 [ 179.787791] ? kthread_complete_and_exit+0x40/0x40 [ 179.788181] ret_from_fork+0x22/0x30 [ 179.788501] [ 179.788733] 00:10:26 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x14}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000400)={'\x00', 0x2, 0x0, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x286b40, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000004c0)={'\x00', 0xcf, 0x2, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) write$bt_hci(r1, &(0x7f0000000540)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x401}}}, 0x8) r2 = socket(0x2c, 0xa, 0x7fffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000580)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000680)="027c869239a76e5e1a3d5bdd1f3404a30c1898c2e3693881ffe1d01f34b4591fce0ccc3b156a0f70f081e9c43d7135369a9c5eccc13f8940337ae4bf32941b4de59792a842f3fc024529311964c62969dd22b8bc0d28a39ccba905df2aa143a79532d53b5efbde45d1cfdd83f0454004") openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x214602, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x80e01, 0x0) [ 179.788733] Showing all locks held in the system: [ 179.789548] 1 lock held by rcu_tasks_kthre/11: [ 179.789910] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.790656] 1 lock held by khungtaskd/25: [ 179.790964] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.791659] 1 lock held by in:imklog/188: [ 179.791960] 3 locks held by syz-executor.0/295: [ 179.792311] 3 locks held by syz-executor.4/298: [ 179.792672] [ 179.792806] ============================================= [ 179.792806] 00:10:27 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0840, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x0, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) io_uring_setup(0x63fd, &(0x7f0000000280)={0x0, 0xe0e3, 0x20, 0x1, 0x3ac, 0x0, r1}) socket(0x0, 0x5, 0x5fd) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) timerfd_gettime(r0, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0xbd5b7f94930f1050, 0x0) 00:10:27 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 00:10:27 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) semget$private(0x0, 0x0, 0x208) 00:10:27 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0xd0e, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x58}}, 0x20000080) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r4) 00:10:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8c9df0699fc7e26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x59b62c6fc69178db}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000800) clock_gettime(0x7, &(0x7f0000000a80)) 00:10:27 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, './binderfs2/binder1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256b4092}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75943179}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e94f8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5065fbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3f986c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e6012d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be7fb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d74cca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7691714e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x933223a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aff}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db57e8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712cb8ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}}, 0x240000c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) mq_open(&(0x7f0000000800)='\xde\\\x00', 0x1, 0x1, &(0x7f0000000840)={0x10000, 0xffffffffffffffe1, 0x1f, 0x24}) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) 00:10:27 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000800)=0x20, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:10:27 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r4) 00:10:27 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:10:27 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x28940, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f00000007c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:10:27 executing program 5: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000011c0)={'\x00', 0x40, 0x1, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x92) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001280)=""/3, 0x3, 0xcd0, &(0x7f00000012c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mq_open(&(0x7f0000001340)='\x00', 0x40, 0xaa, &(0x7f0000001380)={0x9279, 0x3, 0x7, 0xfffffffffffffe00}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000013c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r4) 00:10:27 executing program 1: r0 = semget(0x3, 0x0, 0x8c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x4, 0x540) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000001000)=""/80) r2 = semget(0x2, 0x4, 0x2c8) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000001080)=""/32) semget(0x1, 0x2, 0x202) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000010c0)=""/239) semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000011c0)=""/116) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000001240)=""/4096) r3 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000002240)=""/106) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000022c0)=""/119) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x2300, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002380)=""/107) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 00:10:27 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x200800) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xbc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/230, 0xe6, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/155, 0x9b, 0x0, 0x34}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0xe6, 0x0, &(0x7f0000000500)="e0938f083585eeee1bf5f0fc3ce22ffcfb1ea5d5b3b6295d5c27ae57761aacdf9368f0b754558bcfc793697385c69637a44afb11c2f9794d6293ef6836aa996c5d19fab9058d6c06684e7e877cfb1efa5da6bdd3334b708bc7e90b865c3cfcdfd60ba4bd06f2d4d6121b2a1108399d94b4ed63764751b3e7c710ccac6704cb484f86cd927e8748b444b6209a741d229aa5904318fdf4835c883e828052a74700902ca6605b515ef5e8fc56188a503a4be642b1b3813c1db2e30e963fb84db33212064c67357d4e2a99f1fc6d0f20d37f81253f6fa7f89ecc8b93973d7aa889f02ee5a56fce5c"}) read$ptp(0xffffffffffffffff, &(0x7f0000000640)=""/31, 0x1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) semget$private(0x0, 0x0, 0x208) VM DIAGNOSIS: 00:10:27 Registers: info registers vcpu 0 RAX=0000000000000046 RBX=ffff8880369a1ac0 RCX=ffffffff81297e8f RDX=0000000000000007 RSI=0000000000000000 RDI=ffffffff84273d8f RBP=ffffffff84273d8f RSP=ffff888037eefbe0 R8 =0000000000000001 R9 =ffffffff86cd3817 R10=fffffbfff0d9a702 R11=0000000000000001 R12=0000000000000005 R13=ffff888037eefec8 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff8425318e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555563f4400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564cdac76648 CR3=000000001a700000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc126c8fe0 CR3=000000000d22a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 414e71d2e31f9812 YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f74032e3240426d YMM04=0000000000000000 0000000000000000 7396d75fabef8971 c86e55108898fd13 YMM05=0000000000000000 0000000000000000 071fa860df728331 1dd334cf6ea4a86e YMM06=0000000000000000 0000000000000000 653f384c77156d12 f493e679c88f0d2c YMM07=0000000000000000 0000000000000000 403d9784b14dcd25 8c29f1ad08c42e5f YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 000000c000737740 00000000004643c1 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 3535366633383363 3437373531643632 YMM14=0000000000000000 0000000000000000 3263383932316664 6138303463653266 YMM15=0000000000000000 0000000000000000 2230346433373934 3831626434646335