syzkaller login: [ 40.523771] sshd (242) used greatest stack depth: 24784 bytes left Warning: Permanently added '[localhost]:21762' (ECDSA) to the list of known hosts. 2022/10/01 16:03:38 fuzzer started 2022/10/01 16:03:38 dialing manager at localhost:35095 [ 42.739914] cgroup: Unknown subsys name 'net' [ 42.826568] cgroup: Unknown subsys name 'rlimit' 2022/10/01 16:03:53 syscalls: 207 2022/10/01 16:03:53 code coverage: enabled 2022/10/01 16:03:53 comparison tracing: enabled 2022/10/01 16:03:53 extra coverage: enabled 2022/10/01 16:03:53 setuid sandbox: enabled 2022/10/01 16:03:53 namespace sandbox: enabled 2022/10/01 16:03:53 Android sandbox: enabled 2022/10/01 16:03:53 fault injection: enabled 2022/10/01 16:03:53 leak checking: enabled 2022/10/01 16:03:53 net packet injection: enabled 2022/10/01 16:03:53 net device setup: enabled 2022/10/01 16:03:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 16:03:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 16:03:53 USB emulation: enabled 2022/10/01 16:03:53 hci packet injection: enabled 2022/10/01 16:03:53 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 16:03:53 802.15.4 emulation: enabled 2022/10/01 16:03:53 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 16:03:53 starting 8 fuzzer processes 16:03:53 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) getrusage(0x1, &(0x7f00000000c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r1 = fork() getpgid(r1) fork() getrusage(0xffffffffffffffff, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f00000003c0)='ns/user\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000480)={0x2, 0x401, 0xfffffff9, 0x3, 0x0, 0x53}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8000) fork() r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200440c4}, 0x50) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb0}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000410}, 0x4000) 16:03:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0xc0800) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000380)=0x1) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x80000000, 0x2c1c2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c090}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x28}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x44811}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0xbc0c0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004081}, 0x24044090) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0x7c, 0x28, 0x10000, 0x32, @mcast1, @loopback, 0x8000, 0x4d, 0x101, 0x1}}) [ 57.352730] audit: type=1400 audit(1664640233.966:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:03:53 executing program 2: r0 = io_uring_setup(0x2a17, &(0x7f0000000000)={0x0, 0x29ba, 0x10, 0x0, 0x3aa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i915', 0x1, 0x7d) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0xc840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x440d0}, 0x850) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getitimer(0x0, &(0x7f00000004c0)) getrusage(0xfffffffffffffffe, &(0x7f0000000500)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getitimer(0x1, &(0x7f0000000780)) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7, {0x3, 0x8}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:03:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x7c}}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20040880) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = socket(0x1e, 0x5, 0x7) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000640)={0x0, 0x4, {0x2, @usage=0x4, 0x0, 0x8, 0x200, 0x80, 0x1, 0x1f, 0x26, @struct={0x152, 0x6}, 0x80000000, 0x800, [0x0, 0x5, 0xfffffffffffffff7, 0x8, 0x5, 0x7fff]}, {0x400, @usage=0x4, 0x0, 0xfffffffffffffff7, 0x7fffffff, 0x2, 0x8, 0x5, 0x2, @usage=0x4000000000, 0x0, 0x0, [0x7, 0x1, 0x6, 0x10000, 0x2, 0x8a]}, {0x401, @usage=0x101, 0x0, 0x100000001, 0xf847, 0x7, 0x8001, 0x5, 0x0, @struct={0x3, 0x1}, 0x1ace, 0x9, [0x100000001, 0xffffffff, 0x4, 0x6, 0x0, 0xff]}, {0x7ff, 0x8, 0x3}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000a40)={0x1, 0x8, @start={r7, 0x1, "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", "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"}, [0xfffffffffffffbff, 0x74fc, 0x6, 0x9, 0x2, 0x4, 0x3, 0x1ff, 0x3ff, 0x0, 0x0, 0x8, 0x6, 0x8000, 0x7fffffff, 0x0, 0xff, 0x5, 0xfc64, 0x5, 0xa0b, 0x8, 0x5, 0x0, 0x2, 0x5, 0x1e, 0x8, 0x7fff, 0xfff, 0xffffffff, 0x4ea9, 0x7ff, 0x3f, 0x3, 0x0, 0x1254b738, 0x7, 0x8, 0x72bfceb7, 0x0, 0x800000000, 0x6, 0x1, 0x4, 0x0, 0x3ff, 0x645, 0x0, 0x4, 0x3, 0x6, 0x9, 0xffff, 0xffffffffffffffd1, 0x8, 0x1000, 0x20, 0x9, 0x37, 0xfffffffffffffffe, 0x7, 0xaf6, 0x4e]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000014c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c881}, 0x260088c1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9d77}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000001) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001800)={&(0x7f0000001740), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 16:03:53 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(0x0, 0x400, 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x69]}, 0x8}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) clock_gettime(0x6, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) clock_gettime(0x5, &(0x7f0000000280)) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0x4) pselect6(0x40, &(0x7f0000000340)={0x7, 0x8, 0x401, 0x0, 0x7fffffff, 0xffffffffffffffe1, 0x81a8, 0x1ff}, &(0x7f0000000380)={0x6, 0x7, 0x8000, 0x0, 0xffffffff, 0x2, 0xffffffffffffff81, 0x5}, &(0x7f00000003c0)={0x80000001, 0x4, 0x5, 0x8, 0x0, 0x1000, 0xac7d, 0x69e9}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x80000000]}, 0x8}) io_getevents(0x0, 0x80, 0x2, &(0x7f00000004c0)=[{}, {}], &(0x7f0000000500)) clock_gettime(0x2, &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) sched_rr_get_interval(r2, &(0x7f0000000600)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x212, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044814}, 0x10) io_setup(0xf18d, &(0x7f00000007c0)=0x0) io_pgetevents(r4, 0x3f, 0x9, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)={0x77359400}, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x64, &(0x7f0000000980), &(0x7f00000009c0)=0x4) io_setup(0x1, &(0x7f0000000a00)=0x0) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) io_pgetevents(r5, 0x5, 0x5, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], &(0x7f0000000b40)={r6, r7+10000000}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0x5a2]}, 0x8}) 16:03:54 executing program 5: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x33d}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000140)={0x0, 0x92d, 0x100000000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000600)={r3, "bdb5e6375d8f8580c22de30b3d459a6d"}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001600)={{r4}, 0x0, 0x14, @inherit={0x50, &(0x7f0000000580)={0x0, 0x1, 0x1, 0x3, {0x20, 0x9, 0x400, 0x1f, 0x3934a846}, [0x10001]}}, @devid=r5}) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000002600)=0x7) r6 = eventfd(0xb387) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000002a40)={r7, 0x1, 0xb064000, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002e40)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f00), &(0x7f0000002f40)=0xc) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002f80)={r8, 0x0, 0x7}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000003380)={0x0, "c0d2d7d9b2918fb39cce267a8329a66f"}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000004380)={r10, "3989965d8f53d2740c8fde5c66b583cb"}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000005fc0)={{r4}, 0x0, 0x0, @unused=[0xfff, 0x1, 0x4, 0x80000000], @devid}) 16:03:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x1, 0x9}, 'port1\x00', 0x4, 0x82300e851b5d7d5c, 0x8, 0xffffffff, 0x1, 0x3f, 0x800, 0x0, 0x3, 0x40}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x101000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/82, 0x52) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000240)={0x2, 0x3f, @start={0x0, 0x0, "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", "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"}, [0xfffffffffffff001, 0xffffffffffffffff, 0x7fff, 0x100000000, 0x6, 0x4, 0x200, 0xfffffffffffffffa, 0x2, 0x1f, 0x3f, 0xff, 0x3ff, 0x7fffffff, 0x9f, 0x6, 0x1, 0x5, 0x1000, 0xff5, 0x0, 0x0, 0x0, 0x4, 0x6, 0x128b, 0x5, 0x3, 0xc8, 0x6, 0x1, 0x5, 0x3, 0x4da, 0x6, 0x100, 0x2, 0x1, 0x0, 0xcde7, 0x5, 0x5, 0x6, 0x4, 0x800000, 0x0, 0x48, 0xffffffffffffffff, 0x8bc, 0xfffffffffffeffff, 0x3, 0xed6d, 0x8, 0xec, 0x3ff, 0x4d12bbe7, 0x101, 0x8c66, 0x3, 0x4, 0x5, 0x8, 0x4, 0x7fff]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000c80)={0x4, 0x2, {0x2, @usage=0x4, 0x0, 0x3ff, 0x9, 0xd, 0x5, 0x7, 0xbb, @struct={0x1}, 0x9000000, 0xff, [0x800, 0x5, 0x1000, 0x5, 0x9, 0x1]}, {0x7ff, @usage=0x6, r4, 0x800, 0xaa0d, 0x1, 0xfffffffffffffffd, 0x3, 0x50, @struct={0xf4, 0x1}, 0xd6a4, 0x100, [0xfff, 0x5, 0x5, 0x4, 0xff, 0x80000000]}, {0x8, @struct={0xfffffc00, 0x9875}, 0x0, 0xfffffffffffffffe, 0x3, 0x3, 0xfffffffffffffce1, 0x1db2, 0x2, @usage=0x5, 0x0, 0x4, [0x73c, 0x6, 0x4, 0x9, 0x0, 0x4]}, {0x80000001, 0x2, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2, {0x20000000}}, './file0\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000001180)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x7, 0xfff8, r6, &(0x7f00000010c0)="7c1d8327d61249e48a2dd353bae65f6738fa9929150095ba7b1ff44218e152b1e6edb4dbe2fa0d7de2702de35ed4e9259435b5d93c73e8561ef53865c501a246f3b8e6b19482a74bd7f86c", 0x4b, 0x9, 0x0, 0x0, r5}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000011c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000015c0), 0x3090c3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000001600)={0x8, 0xd9c9, 0x242}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000001680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000016c0)) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000018c0)={0x7, 0x3, {0x5, @struct={0x6, 0x7fff}, r7, 0x2, 0x80000001, 0x5, 0x7, 0x6, 0x0, @usage=0x20, 0x52a00000, 0x1, [0x400, 0x8, 0x0, 0x7, 0x2, 0x7]}, {0x1, @usage=0x401, r8, 0x10001, 0x2, 0x3, 0x0, 0x8, 0x4, @usage=0x7, 0x8, 0x2e6, [0x1ff, 0x6, 0xb3da, 0x4, 0x5, 0x5]}, {0x1, @struct={0x3, 0x9}, r7, 0x3000000000, 0x8000000000000000, 0x7, 0x8, 0x7ff, 0x400, @usage=0x2, 0x3, 0x3, [0x8001, 0x3, 0x1, 0x1ff, 0x400, 0x200]}, {0x40, 0x2, 0x8}}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f00000020c0)={0x0, 0xb02, 0xfffffffffffffffa}) 16:03:54 executing program 7: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x1}) r1 = socket(0x15, 0x1, 0x800) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000004c0)={{r2}, 0x0, 0x22, @inherit={0x60, &(0x7f0000000440)={0x0, 0x3, 0x4, 0x9, {0xc07f104e2d920c13, 0x6, 0x0, 0x10000, 0x7b73f758}, [0x6, 0x5, 0xe1]}}, @subvolid=0x1ff}) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0xac, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x26}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x158}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x51b}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x8010) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001640)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000001680), 0x8, 0x420000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000001840)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001880)={0x1, 0x3, {0x4, @usage=0x5, r0, 0x6, 0x4, 0x100000001, 0x4da76bc8, 0x5, 0x66, @struct={0x3, 0x8}, 0x7fff, 0x5c67fd5d, [0x4, 0x4, 0x15, 0x1, 0x5, 0xfffffffffffffff9]}, {0x7ff, @usage=0x8001, r0, 0x3, 0x0, 0x7, 0x80, 0x8, 0x1, @struct={0x100, 0x3000}, 0xcca, 0x2, [0x2, 0x2, 0xfffffffffffffffc, 0x2, 0x4, 0x4]}, {0x7, @usage=0x2, 0x0, 0xd15, 0x2, 0x0, 0xfff, 0x8000, 0x450, @struct={0x644, 0x7f}, 0xfffffffc, 0x1f, [0x6, 0x56, 0x66, 0x1, 0x6, 0xb85]}, {0x6, 0x3f, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r5, {r8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee00}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000001fc0)={0x94, 0x0, &(0x7f0000001e00)=[@acquire_done={0x40106309, 0x2}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001d40)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r10}, @flat=@handle={0x73682a85, 0x1100}}, &(0x7f0000001dc0)={0x0, 0x18, 0x30}}}, @enter_looper, @exit_looper, @register_looper, @request_death, @increfs_done={0x40106308, 0x1}], 0xc8, 0x0, &(0x7f0000001ec0)="ee1c41b3cccd6b315622ce073d158a1df2058cec0d039be0fd445cf77a7801dd71d66052f2d8cf0f79b29dce6e142468468d9b4387bcc88b0d55ece1cebef3722bf962f51539b7530cad8e55296cbf745312e12175824a2314fdef44620f942b940af98b5afa9944ebb4ca99c25ba5bd3d72e32bb1c5bd042e166a8635555df48f4e6c25e182b7420e5bcd050227b9208b8b5abf9448548ae56a2b493deebaefac7ba3f562c0dce5f89404e332845cf9608a28c85df87c965971784ac768638ee600c5d2a3eb5462"}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000002000)={{r9}, {@void, @actul_num={@val=0x2d, 0x4, 0x50}}}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x3) socket(0x2, 0x80000, 0x1) [ 58.597489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.601150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.603787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.605322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.606974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.608468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.611720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.613684] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.615166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.623861] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.630140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.634505] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.639996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.647799] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.719277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.721840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.723848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.726958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.728895] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.730433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.735245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.737069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.738342] Bluetooth: hci5: HCI_REQ-0x0c1a [ 58.738681] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.740790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.741910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.743363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.745365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.747109] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.748816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.750737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.752308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.754890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.761813] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.763123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.764513] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.771283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.772414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.779017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.782548] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.786976] Bluetooth: hci7: HCI_REQ-0x0c1a [ 58.790148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.790252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.793827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.800124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.801511] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.805336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.815384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.822228] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.662015] Bluetooth: hci1: command 0x0409 tx timeout [ 60.662028] Bluetooth: hci0: command 0x0409 tx timeout [ 60.725655] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 60.789690] Bluetooth: hci6: command 0x0409 tx timeout [ 60.789741] Bluetooth: hci5: command 0x0409 tx timeout [ 60.853723] Bluetooth: hci3: command 0x0409 tx timeout [ 60.854379] Bluetooth: hci7: command 0x0409 tx timeout [ 60.854954] Bluetooth: hci2: command 0x0409 tx timeout [ 62.709702] Bluetooth: hci1: command 0x041b tx timeout [ 62.710938] Bluetooth: hci0: command 0x041b tx timeout [ 62.837693] Bluetooth: hci6: command 0x041b tx timeout [ 62.839138] Bluetooth: hci5: command 0x041b tx timeout [ 62.901941] Bluetooth: hci2: command 0x041b tx timeout [ 62.902346] Bluetooth: hci7: command 0x041b tx timeout [ 62.902757] Bluetooth: hci3: command 0x041b tx timeout [ 63.483084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.484964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.486285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.488437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.490422] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.492530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.497720] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.757694] Bluetooth: hci0: command 0x040f tx timeout [ 64.758187] Bluetooth: hci1: command 0x040f tx timeout [ 64.886709] Bluetooth: hci5: command 0x040f tx timeout [ 64.887147] Bluetooth: hci6: command 0x040f tx timeout [ 64.950729] Bluetooth: hci3: command 0x040f tx timeout [ 64.951151] Bluetooth: hci7: command 0x040f tx timeout [ 64.951556] Bluetooth: hci2: command 0x040f tx timeout [ 65.526694] Bluetooth: hci4: command 0x0409 tx timeout [ 66.805720] Bluetooth: hci1: command 0x0419 tx timeout [ 66.806166] Bluetooth: hci0: command 0x0419 tx timeout [ 66.933659] Bluetooth: hci6: command 0x0419 tx timeout [ 66.934097] Bluetooth: hci5: command 0x0419 tx timeout [ 66.999337] Bluetooth: hci2: command 0x0419 tx timeout [ 66.999895] Bluetooth: hci7: command 0x0419 tx timeout [ 67.000295] Bluetooth: hci3: command 0x0419 tx timeout [ 67.575128] Bluetooth: hci4: command 0x041b tx timeout [ 69.622721] Bluetooth: hci4: command 0x040f tx timeout [ 71.671177] Bluetooth: hci4: command 0x0419 tx timeout 16:04:45 executing program 2: r0 = io_uring_setup(0x2a17, &(0x7f0000000000)={0x0, 0x29ba, 0x10, 0x0, 0x3aa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i915', 0x1, 0x7d) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0xc840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x440d0}, 0x850) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getitimer(0x0, &(0x7f00000004c0)) getrusage(0xfffffffffffffffe, &(0x7f0000000500)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getitimer(0x1, &(0x7f0000000780)) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7, {0x3, 0x8}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:04:45 executing program 2: r0 = io_uring_setup(0x2a17, &(0x7f0000000000)={0x0, 0x29ba, 0x10, 0x0, 0x3aa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i915', 0x1, 0x7d) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0xc840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x440d0}, 0x850) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getitimer(0x0, &(0x7f00000004c0)) getrusage(0xfffffffffffffffe, &(0x7f0000000500)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getitimer(0x1, &(0x7f0000000780)) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7, {0x3, 0x8}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:04:45 executing program 2: r0 = io_uring_setup(0x2a17, &(0x7f0000000000)={0x0, 0x29ba, 0x10, 0x0, 0x3aa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i915', 0x1, 0x7d) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0xc840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x440d0}, 0x850) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getitimer(0x0, &(0x7f00000004c0)) getrusage(0xfffffffffffffffe, &(0x7f0000000500)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getitimer(0x1, &(0x7f0000000780)) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7, {0x3, 0x8}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:04:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x7c}}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20040880) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = socket(0x1e, 0x5, 0x7) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000640)={0x0, 0x4, {0x2, @usage=0x4, 0x0, 0x8, 0x200, 0x80, 0x1, 0x1f, 0x26, @struct={0x152, 0x6}, 0x80000000, 0x800, [0x0, 0x5, 0xfffffffffffffff7, 0x8, 0x5, 0x7fff]}, {0x400, @usage=0x4, 0x0, 0xfffffffffffffff7, 0x7fffffff, 0x2, 0x8, 0x5, 0x2, @usage=0x4000000000, 0x0, 0x0, [0x7, 0x1, 0x6, 0x10000, 0x2, 0x8a]}, {0x401, @usage=0x101, 0x0, 0x100000001, 0xf847, 0x7, 0x8001, 0x5, 0x0, @struct={0x3, 0x1}, 0x1ace, 0x9, [0x100000001, 0xffffffff, 0x4, 0x6, 0x0, 0xff]}, {0x7ff, 0x8, 0x3}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000a40)={0x1, 0x8, @start={r7, 0x1, "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", "272b2182c6ef9ca5f3162da6f8c03212deb6341a8c9ab72ba412f61e33eaa1faa219191906226689e143ca8b8e089c8d4218064c1cfdf861b0a47e91151643b7b9ae15b2c8159d2bdaff8c32579f0b1be03db56335e963c324dfa5d08699478cea89c643bcc04c1b2b2090ab3fef376c64acea6aca9742ba3ff29984430c66b2046d195586e57ad47dfd0c457990f623f7cf826784b7d2a41f15b720d32249667bbd47e108cd20828cab19617566cc9d332892e97ac754ce4e0c22c8d75bb79f87a923d0dc17032ed0b4a33f3d3566393c320f874306d747b8f6c20b39e2d246cd4dbbac9e1c5f1d96c3d9fb2c74d9e1f2d823f60d5911e6ade4bf03afca2ffea12d2cff4dccc294f6b38bee269d96e2d8cd9a3f5dff7b4f8d12f3978aaa5ad3d83262b6c014ed6edfe5e2be8e8bd6895bb8946bb201f224708e80a409ba9f9529dd204c25cfb783f73eb38e1d875c5972f3b7bbbb12b62d8488c2f76fd77970cb0fca33d5b4e2fb5e205ca5a269873a295cc48377bed98ebd57036d404cc580a7fc1f6a24b26a4a23e1737d6481e9d7adda4882f0757a70f1a16644b282420b100a46b683bb6a64ab93e48b18905eaaa045181a2278d61ccdd43b201aa845375b53aad42ebefb21aa71e3a6592f6d923908f009e9a7141b07793bbde1e8414ae999e545c54751639754e849a1b652b9d9d97bdf6d9a54ef2231c08724082e7aca0912f33c5813f9460084840deafa55519f86adffc856e7b82c112130be6a7e7ba7d5c6e6be1840ceeed242fe97e1d4134808ad43c9053e6392befede0514b94d9afef3e14234a8e34aa0c7d298b1a0f87991ee52c469b8716854a96edafa838494767dab58b8a943b12ebab8a2e95726002a56cd8ce0870e543e8f90446429544376caa6dd48bbd287e39175ddda0798ae493c681d141aeea2738994a838a286c28d10978da055707dd3bee4be9e2349c56e7ca0e67e8f4351636b25601c48336789d4da6e94023d5d7f7a105215aae445be756b70783b1443f627b2c0e171ff525e77ef647b921814bfb54ed70c381a6b0169fd98ec71784f75bb6bea1ccd7720ba83ac8e1de19a3c9236edf0a561a25df38cbb9126620668c95ce0c58981fe747062c502f7269b5b6c4e5696f8a6b18b2f18ccbe06d03791fa0b24d0ddae21cff5a6c9a3e79c023d8deb72b7e6079270910c4cf228e28da24d4f92029653cd2479deba1559606bfc577b4604bcd3511fd3d37d26a745bc3749b9651276c18a89b6ea6abbfbbf6df013cc1b67cdbfe1e8ae28cc9802b849532cec4b157204e4b9fa6f0c1fa00b59a2309010f001ab963d7e48234dba24dd327543955e2f6a3213f8433082e2dcafa0f606d4ac9a46a5f8eb0092b4fd525940cbc0c7d5d2bda603afe328d6bb9b1c88c15ba89b978f4c48d44eec6ad46d337e59723890e31c43"}, [0xfffffffffffffbff, 0x74fc, 0x6, 0x9, 0x2, 0x4, 0x3, 0x1ff, 0x3ff, 0x0, 0x0, 0x8, 0x6, 0x8000, 0x7fffffff, 0x0, 0xff, 0x5, 0xfc64, 0x5, 0xa0b, 0x8, 0x5, 0x0, 0x2, 0x5, 0x1e, 0x8, 0x7fff, 0xfff, 0xffffffff, 0x4ea9, 0x7ff, 0x3f, 0x3, 0x0, 0x1254b738, 0x7, 0x8, 0x72bfceb7, 0x0, 0x800000000, 0x6, 0x1, 0x4, 0x0, 0x3ff, 0x645, 0x0, 0x4, 0x3, 0x6, 0x9, 0xffff, 0xffffffffffffffd1, 0x8, 0x1000, 0x20, 0x9, 0x37, 0xfffffffffffffffe, 0x7, 0xaf6, 0x4e]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000014c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c881}, 0x260088c1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9d77}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000001) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001800)={&(0x7f0000001740), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 16:04:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0xc0800) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000380)=0x1) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x80000000, 0x2c1c2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c090}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x28}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x44811}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0xbc0c0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004081}, 0x24044090) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0x7c, 0x28, 0x10000, 0x32, @mcast1, @loopback, 0x8000, 0x4d, 0x101, 0x1}}) 16:04:45 executing program 2: r0 = io_uring_setup(0x2a17, &(0x7f0000000000)={0x0, 0x29ba, 0x10, 0x0, 0x3aa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i915', 0x1, 0x7d) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0xc840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x440d0}, 0x850) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getitimer(0x0, &(0x7f00000004c0)) getrusage(0xfffffffffffffffe, &(0x7f0000000500)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getitimer(0x1, &(0x7f0000000780)) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:04:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x7c}}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20040880) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = socket(0x1e, 0x5, 0x7) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000640)={0x0, 0x4, {0x2, @usage=0x4, 0x0, 0x8, 0x200, 0x80, 0x1, 0x1f, 0x26, @struct={0x152, 0x6}, 0x80000000, 0x800, [0x0, 0x5, 0xfffffffffffffff7, 0x8, 0x5, 0x7fff]}, {0x400, @usage=0x4, 0x0, 0xfffffffffffffff7, 0x7fffffff, 0x2, 0x8, 0x5, 0x2, @usage=0x4000000000, 0x0, 0x0, [0x7, 0x1, 0x6, 0x10000, 0x2, 0x8a]}, {0x401, @usage=0x101, 0x0, 0x100000001, 0xf847, 0x7, 0x8001, 0x5, 0x0, @struct={0x3, 0x1}, 0x1ace, 0x9, [0x100000001, 0xffffffff, 0x4, 0x6, 0x0, 0xff]}, {0x7ff, 0x8, 0x3}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000a40)={0x1, 0x8, @start={r7, 0x1, "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", "272b2182c6ef9ca5f3162da6f8c03212deb6341a8c9ab72ba412f61e33eaa1faa219191906226689e143ca8b8e089c8d4218064c1cfdf861b0a47e91151643b7b9ae15b2c8159d2bdaff8c32579f0b1be03db56335e963c324dfa5d08699478cea89c643bcc04c1b2b2090ab3fef376c64acea6aca9742ba3ff29984430c66b2046d195586e57ad47dfd0c457990f623f7cf826784b7d2a41f15b720d32249667bbd47e108cd20828cab19617566cc9d332892e97ac754ce4e0c22c8d75bb79f87a923d0dc17032ed0b4a33f3d3566393c320f874306d747b8f6c20b39e2d246cd4dbbac9e1c5f1d96c3d9fb2c74d9e1f2d823f60d5911e6ade4bf03afca2ffea12d2cff4dccc294f6b38bee269d96e2d8cd9a3f5dff7b4f8d12f3978aaa5ad3d83262b6c014ed6edfe5e2be8e8bd6895bb8946bb201f224708e80a409ba9f9529dd204c25cfb783f73eb38e1d875c5972f3b7bbbb12b62d8488c2f76fd77970cb0fca33d5b4e2fb5e205ca5a269873a295cc48377bed98ebd57036d404cc580a7fc1f6a24b26a4a23e1737d6481e9d7adda4882f0757a70f1a16644b282420b100a46b683bb6a64ab93e48b18905eaaa045181a2278d61ccdd43b201aa845375b53aad42ebefb21aa71e3a6592f6d923908f009e9a7141b07793bbde1e8414ae999e545c54751639754e849a1b652b9d9d97bdf6d9a54ef2231c08724082e7aca0912f33c5813f9460084840deafa55519f86adffc856e7b82c112130be6a7e7ba7d5c6e6be1840ceeed242fe97e1d4134808ad43c9053e6392befede0514b94d9afef3e14234a8e34aa0c7d298b1a0f87991ee52c469b8716854a96edafa838494767dab58b8a943b12ebab8a2e95726002a56cd8ce0870e543e8f90446429544376caa6dd48bbd287e39175ddda0798ae493c681d141aeea2738994a838a286c28d10978da055707dd3bee4be9e2349c56e7ca0e67e8f4351636b25601c48336789d4da6e94023d5d7f7a105215aae445be756b70783b1443f627b2c0e171ff525e77ef647b921814bfb54ed70c381a6b0169fd98ec71784f75bb6bea1ccd7720ba83ac8e1de19a3c9236edf0a561a25df38cbb9126620668c95ce0c58981fe747062c502f7269b5b6c4e5696f8a6b18b2f18ccbe06d03791fa0b24d0ddae21cff5a6c9a3e79c023d8deb72b7e6079270910c4cf228e28da24d4f92029653cd2479deba1559606bfc577b4604bcd3511fd3d37d26a745bc3749b9651276c18a89b6ea6abbfbbf6df013cc1b67cdbfe1e8ae28cc9802b849532cec4b157204e4b9fa6f0c1fa00b59a2309010f001ab963d7e48234dba24dd327543955e2f6a3213f8433082e2dcafa0f606d4ac9a46a5f8eb0092b4fd525940cbc0c7d5d2bda603afe328d6bb9b1c88c15ba89b978f4c48d44eec6ad46d337e59723890e31c43"}, [0xfffffffffffffbff, 0x74fc, 0x6, 0x9, 0x2, 0x4, 0x3, 0x1ff, 0x3ff, 0x0, 0x0, 0x8, 0x6, 0x8000, 0x7fffffff, 0x0, 0xff, 0x5, 0xfc64, 0x5, 0xa0b, 0x8, 0x5, 0x0, 0x2, 0x5, 0x1e, 0x8, 0x7fff, 0xfff, 0xffffffff, 0x4ea9, 0x7ff, 0x3f, 0x3, 0x0, 0x1254b738, 0x7, 0x8, 0x72bfceb7, 0x0, 0x800000000, 0x6, 0x1, 0x4, 0x0, 0x3ff, 0x645, 0x0, 0x4, 0x3, 0x6, 0x9, 0xffff, 0xffffffffffffffd1, 0x8, 0x1000, 0x20, 0x9, 0x37, 0xfffffffffffffffe, 0x7, 0xaf6, 0x4e]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000014c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c881}, 0x260088c1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9d77}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000001) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001800)={&(0x7f0000001740), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 16:04:45 executing program 2: r0 = io_uring_setup(0x2a17, &(0x7f0000000000)={0x0, 0x29ba, 0x10, 0x0, 0x3aa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i915', 0x1, 0x7d) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0xc840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x440d0}, 0x850) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getitimer(0x0, &(0x7f00000004c0)) getrusage(0xfffffffffffffffe, &(0x7f0000000500)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getitimer(0x1, &(0x7f0000000780)) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 113.995156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.998073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.999581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.002566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.004802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.005826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.009675] Bluetooth: hci1: HCI_REQ-0x0c1a [ 114.381935] Failed to initialize the IGMP autojoin socket (err -2) [ 116.021723] Bluetooth: hci1: command 0x0409 tx timeout [ 118.069706] Bluetooth: hci1: command 0x041b tx timeout [ 120.117912] Bluetooth: hci1: command 0x040f tx timeout [ 122.165741] Bluetooth: hci1: command 0x0419 tx timeout [ 138.997782] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 141.181016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.190984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.194854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.198204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.200362] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.202389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.207561] Bluetooth: hci1: HCI_REQ-0x0c1a [ 141.603655] Failed to initialize the IGMP autojoin socket (err -2) [ 143.221770] Bluetooth: hci1: command 0x0409 tx timeout [ 145.269744] Bluetooth: hci1: command 0x041b tx timeout [ 147.317755] Bluetooth: hci1: command 0x040f tx timeout [ 149.365796] Bluetooth: hci1: command 0x0419 tx timeout [ 164.282913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.293343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.296913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.299404] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.301377] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.302584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.306739] Bluetooth: hci1: HCI_REQ-0x0c1a [ 164.700773] Failed to initialize the IGMP autojoin socket (err -2) [ 166.325827] Bluetooth: hci1: command 0x0409 tx timeout [ 168.373740] Bluetooth: hci1: command 0x041b tx timeout [ 170.421730] Bluetooth: hci1: command 0x040f tx timeout [ 172.469702] Bluetooth: hci1: command 0x0419 tx timeout [ 183.733703] Bluetooth: hci0: command 0x0406 tx timeout [ 183.733830] Bluetooth: hci3: command 0x0406 tx timeout [ 183.734696] Bluetooth: hci5: command 0x0406 tx timeout [ 185.781782] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 185.783016] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.783971] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.785521] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 185.787518] Call Trace: [ 185.788368] [ 185.788805] __schedule+0x893/0x2470 [ 185.789484] ? io_schedule_timeout+0x150/0x150 [ 185.790290] ? do_raw_spin_lock+0x121/0x260 [ 185.791075] ? rwlock_bug.part.0+0x90/0x90 [ 185.791843] schedule+0xda/0x1b0 [ 185.792427] rescuer_thread+0x851/0xdb0 [ 185.793178] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.793842] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.794363] ? lockdep_hardirqs_on+0x79/0x100 [ 185.794860] ? worker_thread+0x1260/0x1260 [ 185.795304] kthread+0x2ed/0x3a0 [ 185.795691] ? kthread_complete_and_exit+0x40/0x40 [ 185.796201] ret_from_fork+0x22/0x30 [ 185.796643] [ 185.796893] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 185.797549] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.798107] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.798898] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 185.799768] Call Trace: [ 185.800035] [ 185.800277] __schedule+0x893/0x2470 [ 185.800704] ? io_schedule_timeout+0x150/0x150 [ 185.801188] ? do_raw_spin_lock+0x121/0x260 [ 185.801664] ? rwlock_bug.part.0+0x90/0x90 [ 185.802116] schedule+0xda/0x1b0 [ 185.802479] rescuer_thread+0x851/0xdb0 [ 185.802939] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.803459] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.804008] ? lockdep_hardirqs_on+0x79/0x100 [ 185.804477] ? worker_thread+0x1260/0x1260 [ 185.804953] kthread+0x2ed/0x3a0 [ 185.805328] ? kthread_complete_and_exit+0x40/0x40 [ 185.805877] ret_from_fork+0x22/0x30 [ 185.806310] [ 185.806560] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 185.807259] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.807834] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.808655] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 185.809520] Call Trace: [ 185.809812] [ 185.810057] __schedule+0x893/0x2470 [ 185.810463] ? io_schedule_timeout+0x150/0x150 [ 185.810968] ? do_raw_spin_lock+0x121/0x260 [ 185.811421] ? rwlock_bug.part.0+0x90/0x90 [ 185.811900] schedule+0xda/0x1b0 [ 185.812263] rescuer_thread+0x851/0xdb0 [ 185.812712] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.813244] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.813790] ? lockdep_hardirqs_on+0x79/0x100 [ 185.814264] ? worker_thread+0x1260/0x1260 [ 185.814743] kthread+0x2ed/0x3a0 [ 185.815107] ? kthread_complete_and_exit+0x40/0x40 [ 185.815648] ret_from_fork+0x22/0x30 [ 185.816064] [ 185.816309] INFO: task netns:6 blocked for more than 143 seconds. [ 185.816954] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.817511] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.818320] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 185.819205] Call Trace: [ 185.819480] [ 185.819747] __schedule+0x893/0x2470 [ 185.820163] ? io_schedule_timeout+0x150/0x150 [ 185.820677] ? do_raw_spin_lock+0x121/0x260 [ 185.821149] ? rwlock_bug.part.0+0x90/0x90 [ 185.821640] schedule+0xda/0x1b0 [ 185.822013] rescuer_thread+0x851/0xdb0 [ 185.822442] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.822997] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.823532] ? lockdep_hardirqs_on+0x79/0x100 [ 185.824046] ? worker_thread+0x1260/0x1260 [ 185.824501] kthread+0x2ed/0x3a0 [ 185.824907] ? kthread_complete_and_exit+0x40/0x40 [ 185.825438] ret_from_fork+0x22/0x30 [ 185.825886] [ 185.826143] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 185.826842] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.827400] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.828209] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 185.829082] Workqueue: 0x0 (kblockd) [ 185.829494] Call Trace: [ 185.829793] [ 185.830035] __schedule+0x893/0x2470 [ 185.830446] ? io_schedule_timeout+0x150/0x150 [ 185.830958] schedule+0xda/0x1b0 [ 185.831321] worker_thread+0x15f/0x1260 [ 185.831787] ? process_one_work+0x16a0/0x16a0 [ 185.832267] kthread+0x2ed/0x3a0 [ 185.832654] ? kthread_complete_and_exit+0x40/0x40 [ 185.833188] ret_from_fork+0x22/0x30 [ 185.833598] [ 185.833876] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 185.834554] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.835125] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.835918] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 185.836799] Call Trace: [ 185.837068] [ 185.837318] __schedule+0x893/0x2470 [ 185.837749] ? io_schedule_timeout+0x150/0x150 [ 185.838227] ? do_raw_spin_lock+0x121/0x260 [ 185.838705] ? rwlock_bug.part.0+0x90/0x90 [ 185.839158] schedule+0xda/0x1b0 [ 185.839524] rescuer_thread+0x851/0xdb0 [ 185.839979] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.840502] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.841051] ? lockdep_hardirqs_on+0x79/0x100 [ 185.841539] ? worker_thread+0x1260/0x1260 [ 185.842014] kthread+0x2ed/0x3a0 [ 185.842379] ? kthread_complete_and_exit+0x40/0x40 [ 185.842927] ret_from_fork+0x22/0x30 [ 185.843339] [ 185.843584] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 185.844337] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.844917] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.845728] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 185.846585] Call Trace: [ 185.846887] [ 185.847138] __schedule+0x893/0x2470 [ 185.847556] ? io_schedule_timeout+0x150/0x150 [ 185.848071] ? mark_held_locks+0x9e/0xe0 [ 185.848511] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.849066] schedule+0xda/0x1b0 [ 185.849452] rcu_tasks_one_gp+0x3db/0xc10 [ 185.849950] rcu_tasks_kthread+0x80/0xa0 [ 185.850382] ? rcu_tasks_postscan+0x10/0x10 [ 185.850877] kthread+0x2ed/0x3a0 [ 185.851254] ? kthread_complete_and_exit+0x40/0x40 [ 185.851813] ret_from_fork+0x22/0x30 [ 185.852227] [ 185.852479] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 185.853189] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.853781] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.854565] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 185.855430] Workqueue: 0x0 (events_highpri) [ 185.855931] Call Trace: [ 185.856199] [ 185.856456] __schedule+0x893/0x2470 [ 185.856899] ? io_schedule_timeout+0x150/0x150 [ 185.857412] schedule+0xda/0x1b0 [ 185.857815] worker_thread+0x15f/0x1260 [ 185.858256] ? process_one_work+0x16a0/0x16a0 [ 185.858766] kthread+0x2ed/0x3a0 [ 185.859123] ? kthread_complete_and_exit+0x40/0x40 [ 185.859660] ret_from_fork+0x22/0x30 [ 185.860084] [ 185.860328] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 185.861051] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.861636] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.862437] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 185.863323] Call Trace: [ 185.863593] [ 185.863871] __schedule+0x893/0x2470 [ 185.864268] ? io_schedule_timeout+0x150/0x150 [ 185.864775] ? do_raw_spin_lock+0x121/0x260 [ 185.865241] ? rwlock_bug.part.0+0x90/0x90 [ 185.865734] schedule+0xda/0x1b0 [ 185.866102] rescuer_thread+0x851/0xdb0 [ 185.866543] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.867099] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.867646] ? lockdep_hardirqs_on+0x79/0x100 [ 185.868121] ? worker_thread+0x1260/0x1260 [ 185.868567] kthread+0x2ed/0x3a0 [ 185.868964] ? kthread_complete_and_exit+0x40/0x40 [ 185.869491] ret_from_fork+0x22/0x30 [ 185.869929] [ 185.870187] INFO: task kblockd:31 blocked for more than 143 seconds. [ 185.870861] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.871409] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.872219] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 185.873097] Call Trace: [ 185.873390] [ 185.873662] __schedule+0x893/0x2470 [ 185.874076] ? io_schedule_timeout+0x150/0x150 [ 185.874559] ? do_raw_spin_lock+0x121/0x260 [ 185.875064] ? rwlock_bug.part.0+0x90/0x90 [ 185.875536] schedule+0xda/0x1b0 [ 185.875948] rescuer_thread+0x851/0xdb0 [ 185.876389] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.876944] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.877473] ? lockdep_hardirqs_on+0x79/0x100 [ 185.877991] ? worker_thread+0x1260/0x1260 [ 185.878450] kthread+0x2ed/0x3a0 [ 185.878840] ? kthread_complete_and_exit+0x40/0x40 [ 185.879356] ret_from_fork+0x22/0x30 [ 185.879805] [ 185.880102] [ 185.880102] Showing all locks held in the system: [ 185.880770] 1 lock held by rcu_tasks_kthre/11: [ 185.881258] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 185.882299] 1 lock held by khungtaskd/25: [ 185.882748] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 185.883736] 1 lock held by systemd-journal/111: [ 185.884215] 1 lock held by in:imklog/187: [ 185.884668] [ 185.884872] ============================================= [ 185.884872] [ 186.756094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.760338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.762009] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.765519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.767225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.768721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.773676] Bluetooth: hci1: HCI_REQ-0x0c1a [ 187.172366] Failed to initialize the IGMP autojoin socket (err -2) [ 188.789748] Bluetooth: hci1: command 0x0409 tx timeout [ 190.837737] Bluetooth: hci1: command 0x041b tx timeout [ 192.885707] Bluetooth: hci1: command 0x040f tx timeout [ 194.933728] Bluetooth: hci1: command 0x0419 tx timeout VM DIAGNOSIS: 16:06:02 Registers: info registers vcpu 0 RAX=000000000000006d RBX=ffff8880101159b8 RCX=0000000000000000 RDX=1ffff11002022b40 RSI=0000000000000004 RDI=ffff888010115a04 RBP=0000000000008000 RSP=ffff88800db975f8 R8 =0000000000000005 R9 =000000000004806d R10=fffffbfff0b60dda R11=0000000000000001 R12=ffff888010115040 R13=ffff8880101159e0 R14=ffff888015b8d6b0 R15=0000000000048000 RIP=ffffffff8129b584 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2c3b6de900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2c3aacff30 CR3=000000000f190000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 c4d46365077b33c7 000000000013c888 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 4a8bda1e7086161a 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f8a0 R8 =0000000000000001 R9 =ffff88800902f82b R10=ffffed1001205f05 R11=0000000000000001 R12=000000000000001b R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb0c1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeeca82a28 CR3=000000000d474000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 70616d7469622d72 65766f632d7a7973 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000