Warning: Permanently added '[localhost]:51666' (ECDSA) to the list of known hosts. 2026/01/15 15:50:26 fuzzer started 2026/01/15 15:50:27 dialing manager at localhost:35245 syzkaller login: [ 51.414211] cgroup: Unknown subsys name 'net' [ 51.476588] cgroup: Unknown subsys name 'cpuset' [ 51.491136] cgroup: Unknown subsys name 'rlimit' 2026/01/15 15:50:38 syscalls: 213 2026/01/15 15:50:38 code coverage: enabled 2026/01/15 15:50:38 comparison tracing: enabled 2026/01/15 15:50:38 extra coverage: enabled 2026/01/15 15:50:38 setuid sandbox: enabled 2026/01/15 15:50:38 namespace sandbox: enabled 2026/01/15 15:50:38 Android sandbox: enabled 2026/01/15 15:50:38 fault injection: enabled 2026/01/15 15:50:38 leak checking: enabled 2026/01/15 15:50:38 net packet injection: enabled 2026/01/15 15:50:38 net device setup: enabled 2026/01/15 15:50:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 15:50:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 15:50:38 USB emulation: enabled 2026/01/15 15:50:38 hci packet injection: enabled 2026/01/15 15:50:38 wifi device emulation: enabled 2026/01/15 15:50:38 802.15.4 emulation: enabled 2026/01/15 15:50:38 fetching corpus: 0, signal 0/0 (executing program) 2026/01/15 15:50:39 starting 8 fuzzer processes 15:50:39 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:50:39 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = semget(0x1, 0x4, 0x200) semtimedop(r7, &(0x7f0000000480)=[{0x1, 0x1ff, 0x1000}, {0x0, 0x200, 0x1000}, {0x4, 0x7, 0x1800}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/170, 0xaa, 0x707, 0x0) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:50:39 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}}, 0x10) 15:50:39 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000d80)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000dc0)={0x9, 0x5, 0x3000, 0x9, 0x3, "68d8c2598a699a9ea9a4447820568aceb097eb"}) 15:50:39 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x6040080) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 15:50:39 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x2404c000) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x240288c1) 15:50:39 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) [ 62.323245] audit: type=1400 audit(1768492239.422:7): avc: denied { execmem } for pid=268 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:50:39 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) r4 = syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x800) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000480)=0x3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000500)) [ 63.576808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.577753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.581015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.581167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.584228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.588707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.590576] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.593188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.595006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.597423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.598745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.604210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.605587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.608346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.611575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.614560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.618228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.620648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.628569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.630713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.654002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.659933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.663059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.664818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.667065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.667675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.669799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.672873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.674168] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.674303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.684188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.686556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.694158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.695767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.706576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.713124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.716627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.721049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.731972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.739639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.660946] Bluetooth: hci1: command tx timeout [ 65.661554] Bluetooth: hci0: command tx timeout [ 65.723896] Bluetooth: hci2: command tx timeout [ 65.725905] Bluetooth: hci3: command tx timeout [ 65.787927] Bluetooth: hci7: command tx timeout [ 65.788887] Bluetooth: hci6: command tx timeout [ 65.789354] Bluetooth: hci4: command tx timeout [ 65.789821] Bluetooth: hci5: command tx timeout [ 67.708922] Bluetooth: hci0: command tx timeout [ 67.709006] Bluetooth: hci1: command tx timeout [ 67.771928] Bluetooth: hci3: command tx timeout [ 67.772050] Bluetooth: hci2: command tx timeout [ 67.838103] Bluetooth: hci5: command tx timeout [ 67.838497] Bluetooth: hci4: command tx timeout [ 67.838627] Bluetooth: hci6: command tx timeout [ 67.839354] Bluetooth: hci7: command tx timeout [ 69.755876] Bluetooth: hci1: command tx timeout [ 69.756335] Bluetooth: hci0: command tx timeout [ 69.819890] Bluetooth: hci2: command tx timeout [ 69.820345] Bluetooth: hci3: command tx timeout [ 69.883876] Bluetooth: hci4: command tx timeout [ 69.884328] Bluetooth: hci5: command tx timeout [ 69.886889] Bluetooth: hci6: command tx timeout [ 69.887295] Bluetooth: hci7: command tx timeout [ 71.804351] Bluetooth: hci0: command tx timeout [ 71.804867] Bluetooth: hci1: command tx timeout [ 71.867896] Bluetooth: hci3: command tx timeout [ 71.868357] Bluetooth: hci2: command tx timeout [ 71.932927] Bluetooth: hci7: command tx timeout [ 71.933389] Bluetooth: hci6: command tx timeout [ 71.933768] Bluetooth: hci5: command tx timeout [ 71.934196] Bluetooth: hci4: command tx timeout [ 95.912384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.913059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.061579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.062222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.245273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.245904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.328150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.328746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.411069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.411685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.495168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.495802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x2404c000) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x240288c1) [ 96.592131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.592738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x2404c000) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x240288c1) [ 96.660418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.661016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:13 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) r4 = syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x800) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000480)=0x3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000500)) [ 96.713055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.713610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x2404c000) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x240288c1) 15:51:13 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) r4 = syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x800) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000480)=0x3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000500)) [ 96.777457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.778331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x2404c000) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) [ 96.822085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.822651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:13 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) r4 = syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x800) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000480)=0x3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000500)) 15:51:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan1\x00'}) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) [ 96.959814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.960409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.989959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.990583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.032932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.033513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.096112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.096737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.144547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.148271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:51:26 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) r4 = syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x800) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000480)=0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:51:26 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x6040080) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 15:51:26 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:26 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:51:26 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:51:26 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="066af125e2c91b7f2ed03aa6c1da410df870d06e968dc2bfd0e7441487e82dabe036765d2f2cb500049d54f3278602c4b60e45c2f4ca6b092701700b541650fcd7f1766a8d9e0491a8d8c3d88a068f2bd5650f9de3e7ceaa91475fc8a8e3b6a44f842352690b19c1ef697e38b98d16ed23f99e3316d1a147505ccfcedfd6c20acfca09a42d7433b7740c027e2e852bc67a3ad8e572bec28599a2577a179026a929e91a638c2001c5e9e9025b4786a9d347c6207818c2e89c41bffbc411d137afc30cd79fe720f11987bc50e4cc8daace41b43f5a8bdb7d131786e4a1153b9b3b3916b8d0a9b0050711c0ccec8c364993aed3e1792182c4222796498cf65814401a31207a98ddb2c5293005d9dc70fea3cb7ceeeca7fb805c9abe1a401f0c1e73e761714319f22b25275c919065ac4a1ccb48bf727ea3905b1e94a8266e0f5714b195a7c02410a2a026097a6676f5cead54605aa82213c46bed685ff40a7ecedbe227050c017bb72e99ffbcec88bd41688bc93f2015d98e585b517aae96b9b208c61419f4bdba2300e728887deacaf9aa1f96b2e1c63a882995c6dac7022e8990204ea73ad6d5314e56ec60c77cfb3e1aa6a81e50781ec9a25eebae3b5d007214f9742129333aabc889a52c089b841162ec549982384503990f989d1338ba76569d9a35f69e9ed3a3a094c38f05d022a0d70483ded738c6b2795415b1731b5c550cec6d5377510cae3c426d4447fff0a90d3a9a2bbdf0491b5abfd82ef3ee936d790ea5ea74ef88cd84f402ca139569750e5c99dc6409d6bd7c6e2892d5f9ee22a90accb56019961d86cb66332837a1c2006db699c6bb3adc856f241804f374d41746853c713e93f23c280f21ce4c8bc74cb3959c9ac43b8715de1343d4b569219f01266f4ccad992f5b045a235997e69160cd70ebf29c34a025834dd933bc7d19c9501407fcbcc3102599f64ce915a5ff530eb8a21a480c396b5b409ab33a08e9fcafb875b91dfb80cdc2368c874ee950d98a838fad581fc2458740cde5d8fe02df6f8c7f66bfd78a51216cb986381f191767fa7b560246d46f70eda1f2c794b89f1680ffed9feb09c7baf5c381defa31c2d64861660ee4d6d37077e167fafb3b6e5d9814bae0ad0d8aba3a5bc9dbcd422b96931c6f2039f5468951706afd1a28cc72c438d6a10e77d495ab4c91e8c9cf68a83ee38243cbdb3d0575c8c3d78bcf420e74e777881640c8a4801880297405006332d38f29b2eb156692e2eedc07328bdf7af8ec5e962e4a76e79f01fd134695e74a513dd25f8269dd6b4b28cad2fffbeccfc1e62c9ea537dbeabd262e81b31f63e23534337b999624da9e29c6c3d86fb3ced06d9d219c352a13dc7ec9c2b57dfeb1060eae93b0a878aba217b7cb5aa278c66f21dd66925add55fd7d808ae77dfd7bf027e95923f7fd918fa22f4a1"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000d80)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000dc0)={0x9, 0x5, 0x3000, 0x9, 0x3, "68d8c2598a699a9ea9a4447820568aceb097eb"}) 15:51:26 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = semget(0x1, 0x4, 0x200) semtimedop(r7, &(0x7f0000000480)=[{0x1, 0x1ff, 0x1000}, {0x0, 0x200, 0x1000}, {0x4, 0x7, 0x1800}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/170, 0xaa, 0x707, 0x0) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:26 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}}, 0x10) 15:51:26 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = semget(0x1, 0x4, 0x200) semtimedop(r7, &(0x7f0000000480)=[{0x1, 0x1ff, 0x1000}, {0x0, 0x200, 0x1000}, {0x4, 0x7, 0x1800}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/170, 0xaa, 0x707, 0x0) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:35 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}}, 0x10) 15:51:35 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:51:35 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = semget(0x1, 0x4, 0x200) semtimedop(r7, &(0x7f0000000480)=[{0x1, 0x1ff, 0x1000}, {0x0, 0x200, 0x1000}, {0x4, 0x7, 0x1800}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/170, 0xaa, 0x707, 0x0) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:35 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000d80)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000dc0)={0x9, 0x5, 0x3000, 0x9, 0x3, "68d8c2598a699a9ea9a4447820568aceb097eb"}) 15:51:35 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="2b58d1980b6341fe54e1be6f6c266198b20dc0d336a66b98fa5d56446f96f1a2bc0b8cb2f3e10c7f2cbf789ee488cc0b77999b61c77ba17e15da93ae48aaad7971e07d8bb0e8979d74412f2e9d8eb5ef9a7ea9722271f5c05e746591c0079e7cec14494ca43f99287ea7d6ceef6de35a4a20d043a3ed150200861e455f880794dc1cf26c0a9fcdc1508789ac4d30f923d65d221eae6f03f34dea4f72a56ba5460ee82ed9749181e02350e974deeee444313209a56656f2fb5e30e244615f20bb4c9e2f0946e767c72feb6c15b8098a8bbb17dbf389414990988789dc1ec071551aa1fe7ed98469b9756900fb95e1b1f5885f6e7b2c779cb5bf5e7c9f41c95202f55f8af1cc50840e4223b4841720dfe48cd15a2b3250d4621b1f799fd83d6ae64850848f9a48c05cb8f5d6e09092d9d331576b0e4519600b2386a21a558fb8792e77811dbc12078e625ae263b9d65a863c1567a3dec054b039e6225b95642d263784394df232f103a658df9c314e52fb5c9657cec7d450719b34971b8dec59339bef8a62d7896e0ba6a4e3eb7c0305dc15725ae2f97b5cc7cd418eb054ad2975e7404cafe30a40d479d15ca740cadd123d9653f7a1485b0b2582452c826a9e868687476ff83100b43f424f1f6242cf7b6bd65b01961d9e7fc50c2dc3759efc1b822c25684ff0efaaf63cc5a34633053783e1578825ba10403afbdb09ab562d51e777ecface4d9d234f9c180a86791793df67cd535ea53a3d22b535afb5dc6bd47bd64b16c981d700f256406ca8a10e4963b3c032c3d4d5581d6b2c153bacada19592e97af752dd726fcfd8301fdecd35c189e9b7316bcf7560450696d77ba886df0dae73061fbea891f7558e81f6fcdf34f7576ff35ecbec60fc9d4e3323f00e06e9484aafd4547d3013d27ba45af7d1cd375052dd790783e639532c952a7c77bd93fe0bca9019d109fd702c3f099dc4f490b36f21d8cb9f49de621dafde46ca2687e2f7373a71dab2fc50359966c4e9a657cbea5c0e34013b5d88afa769d6ab985e4365a163deee064fb87bf36ec2d379a54ad3d752e33c9546ae6b0eec7a131fb1bacb19a79a34902470b9f7909a5f83f11d5350c149fc5431e07969a63563320e70143bc66d69298fcaedb9406726eb56c9d557121170877c335e2d1af628eb62319ab72c8e4bc21d67c1f6eda13600040e15f193089cd0eb6e19fa71e0c3954c7ab607b679119815c91eb6b65f35573a39e0c4db82dac70a962dccecdd452fb886f2b8b3ba83e136dd2ee00cf6226572f78e6310df7704d22e270a5cd326494f540d64e5086adec99d0d02f0b0b88d2536ddcb1f4052b82c5805906c30d4482edea6a113db72f7287b946b01daa3607d55aacc87ac0c0e4917de21f39a60d831b9a373cb1adaa61f4904b2ad46ec1ef2403ce1fd2bac3095ff0c291de4aa"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x8) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:35 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x800) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:51:35 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:51:35 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x6040080) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 15:51:35 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = semget(0x1, 0x4, 0x200) semtimedop(r7, &(0x7f0000000480)=[{0x1, 0x1ff, 0x1000}, {0x0, 0x200, 0x1000}, {0x4, 0x7, 0x1800}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:35 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000d80)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000dc0)={0x9, 0x5, 0x3000, 0x9, 0x3, "68d8c2598a699a9ea9a4447820568aceb097eb"}) 15:51:35 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000010c0)={0x1ac, 0x6, &(0x7f0000000cc0)="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"}) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:35 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) timerfd_gettime(r0, &(0x7f0000000400)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:51:36 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x6040080) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 15:51:36 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) semget(0x1, 0x4, 0x200) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:36 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="066af125e2c91b7f2ed03aa6c1da410df870d06e968dc2bfd0e7441487e82dabe036765d2f2cb500049d54f3278602c4b60e45c2f4ca6b092701700b541650fcd7f1766a8d9e0491a8d8c3d88a068f2bd5650f9de3e7ceaa91475fc8a8e3b6a44f842352690b19c1ef697e38b98d16ed23f99e3316d1a147505ccfcedfd6c20acfca09a42d7433b7740c027e2e852bc67a3ad8e572bec28599a2577a179026a929e91a638c2001c5e9e9025b4786a9d347c6207818c2e89c41bffbc411d137afc30cd79fe720f11987bc50e4cc8daace41b43f5a8bdb7d131786e4a1153b9b3b3916b8d0a9b0050711c0ccec8c364993aed3e1792182c4222796498cf65814401a31207a98ddb2c5293005d9dc70fea3cb7ceeeca7fb805c9abe1a401f0c1e73e761714319f22b25275c919065ac4a1ccb48bf727ea3905b1e94a8266e0f5714b195a7c02410a2a026097a6676f5cead54605aa82213c46bed685ff40a7ecedbe227050c017bb72e99ffbcec88bd41688bc93f2015d98e585b517aae96b9b208c61419f4bdba2300e728887deacaf9aa1f96b2e1c63a882995c6dac7022e8990204ea73ad6d5314e56ec60c77cfb3e1aa6a81e50781ec9a25eebae3b5d007214f9742129333aabc889a52c089b841162ec549982384503990f989d1338ba76569d9a35f69e9ed3a3a094c38f05d022a0d70483ded738c6b2795415b1731b5c550cec6d5377510cae3c426d4447fff0a90d3a9a2bbdf0491b5abfd82ef3ee936d790ea5ea74ef88cd84f402ca139569750e5c99dc6409d6bd7c6e2892d5f9ee22a90accb56019961d86cb66332837a1c2006db699c6bb3adc856f241804f374d41746853c713e93f23c280f21ce4c8bc74cb3959c9ac43b8715de1343d4b569219f01266f4ccad992f5b045a235997e69160cd70ebf29c34a025834dd933bc7d19c9501407fcbcc3102599f64ce915a5ff530eb8a21a480c396b5b409ab33a08e9fcafb875b91dfb80cdc2368c874ee950d98a838fad581fc2458740cde5d8fe02df6f8c7f66bfd78a51216cb986381f191767fa7b560246d46f70eda1f2c794b89f1680ffed9feb09c7baf5c381defa31c2d64861660ee4d6d37077e167fafb3b6e5d9814bae0ad0d8aba3a5bc9dbcd422b96931c6f2039f5468951706afd1a28cc72c438d6a10e77d495ab4c91e8c9cf68a83ee38243cbdb3d0575c8c3d78bcf420e74e777881640c8a4801880297405006332d38f29b2eb156692e2eedc07328bdf7af8ec5e962e4a76e79f01fd134695e74a513dd25f8269dd6b4b28cad2fffbeccfc1e62c9ea537dbeabd262e81b31f63e23534337b999624da9e29c6c3d86fb3ced06d9d219c352a13dc7ec9c2b57dfeb1060eae93b0a878aba217b7cb5aa278c66f21dd66925add55fd7d808ae77dfd7bf027e95923f7fd918fa22f4a1"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000d80)) 15:51:36 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}}, 0x10) 15:51:36 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:51:36 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0x80000000, 0x3, 0x40, 0x20d, 0xd, "d0df7c6a70ae34398c98c1b3363e5a1b1bc8c2"}) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:45 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:45 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:51:45 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)) 15:51:45 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:51:45 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x6040080) 15:51:45 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000d80)) 15:51:45 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c10}, 0x4000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:51:45 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0000000, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:45 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:45 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = socket(0x6, 0x4, 0x7f) getpeername$packet(r3, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:53 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x804) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:51:53 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) timerfd_create(0x0, 0x80000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:51:53 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:51:53 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)) 15:51:53 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='/dev/sg#\x00') io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:53 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="6c1c943868853d7ff2d10032d51965d9206da7f2dd7ca4c7fe5b752d4e83db62ffe453c61cc44d1aaae407bc956063dfaae48d9c554bc406b805af56585b216c9886680c49580354d3245075cf0c7bbabf3fc61741985d7e4d2a56c4779d83995a0ee36a5fbbd4184a8663c55288f7788f713589992e7ad6b1ac2fc5a8cfaeb6d85e1797e51e88bd982383066caa296ded4696f91c686582cf8761bedb9dc05e26f135ad8a287f7ac26ad87ac0bdd10f0d72f652b6b952c2894d0b0ad7f6a406e7a9a8a973f14e1a01733602cb31407330b42e6ae03326d8b9c14fc36df99fc15ff3b3e8dd3c2ae19c9755b8745a056ccf35ba21ae686a0615a4d5081d25fcc7caadb3c0a2d936d3a53980c67edf0cbd5086b61b801ee30eb5e19850e24be028de2c59ef369221faf096706288afb7146f277760e69d21dd2086e12791109922c137db5a8e650c04408a22f5ab11088289e4046c3cff35b38e0fac17e9d0796d274e7b0e90476253b60cd525367a4f2846d55ed116df5e84d72aa449ac38863f8b80a04699204882a64fbaff4b2aeafd26d72ad7ee3bad3a6a1b474a280bd1dda5b992dc84e788787a6fafcbb17759fb7d38470b0e6c4a5c83c069b814b2418d8140dd5863716c0d5eb041a4050ac9320e3c4fb67c72aea5612f88a8eac64a48e20c9f6080a398f580ac972b2c3869ae966616a11adfcff933f48c0605c9841b123a3b4d2bb0172fc0f202ee1de85b3bd6eeac09ac1cd1c95915276fe1d0f00679d09e1dc393fe1491e6cddcdce4cb835696a1d784e07fbc6696b0098a504f0faff5b3778cc57495e63eb466ccfd1212699acf6aad4488f4f4de4156f9411c759e1e1d6df2797f27858e4281304eaa9adace41598b340e61af2c3924a812dd4e0d9a9b7a9663fa0968dee73aaa0f183024191cf6915e27018756a6125a6c9682848fe4742ff290805eba911757a4c5901d6bd1d475e165d5a3d03327683411b30961a2a6c6e28494e2e686bc400c2bd0ffb6ca7786dd471eba8e75ea73b4c0a19026d334d5043046c9e535f4531434378e7805bbc9e625677ce26a73c9ec978fa0cc13a0c99a5991640c6e4dc3d7d8928e098cf1067e72a17ccbfddae5c1ee42e57f981ffafa36d23c9018f2a1224320baa73a7e50ea6cb7d5e1a93ad67ca62a77097f7f14aec11c54bb4e246390bc1e44691762e0f6cb8a39bc47d18bc9c5dcc01c5a7244e4172d2d75a5bf3505ff6dfb543a9d8bd58834091ede24cc117788c634be77ebac2efff7208fc1d35f264c7584fb8218b7401b8f4a06784a4331da680073aa5b9d62688baa4b512462ee206789fb207364a61e900ad17ae7d011ecdf987a621bd7351ce178f56aa1b75d57896832b88525675cbf873032f4c74cb751a0fc6498cf5fee6d748dc0145db1e779bbfdc270833e9a62102f5eff25f1d9"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000d80)) 15:51:53 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:53 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 15:51:53 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0xd8, 0x7, 0xff, 0xa3, 0x0, 0x6, 0x44000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x200}, 0x4100, 0x1, 0xf25, 0x6, 0x5, 0x5, 0x9, 0x0, 0x40, 0x0, 0x4}, r2, 0x7, r0, 0xd) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:53 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) ioctl$TIOCCONS(r3, 0x541d) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:54 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) ioctl$TIOCEXCL(r0, 0x540c) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:51:54 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)) 15:51:54 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$TIOCEXCL(r4, 0x540c) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000d80)) 15:51:54 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:54 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={r4, r5+10000000}) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:54 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:51:54 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:51:54 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) clock_gettime(0x0, &(0x7f0000000380)) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:51:54 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:51:54 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c100) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:51:54 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000d80)) 15:51:54 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x4, 0x8, 0x94, 0xfffc, 0x6, "e916a0ad029f09fc"}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:02 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x100) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:02 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:52:02 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:02 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:02 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:02 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) pipe(&(0x7f0000000880)) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:02 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00'}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:02 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="6c1c943868853d7ff2d10032d51965d9206da7f2dd7ca4c7fe5b752d4e83db62ffe453c61cc44d1aaae407bc956063dfaae48d9c554bc406b805af56585b216c9886680c49580354d3245075cf0c7bbabf3fc61741985d7e4d2a56c4779d83995a0ee36a5fbbd4184a8663c55288f7788f713589992e7ad6b1ac2fc5a8cfaeb6d85e1797e51e88bd982383066caa296ded4696f91c686582cf8761bedb9dc05e26f135ad8a287f7ac26ad87ac0bdd10f0d72f652b6b952c2894d0b0ad7f6a406e7a9a8a973f14e1a01733602cb31407330b42e6ae03326d8b9c14fc36df99fc15ff3b3e8dd3c2ae19c9755b8745a056ccf35ba21ae686a0615a4d5081d25fcc7caadb3c0a2d936d3a53980c67edf0cbd5086b61b801ee30eb5e19850e24be028de2c59ef369221faf096706288afb7146f277760e69d21dd2086e12791109922c137db5a8e650c04408a22f5ab11088289e4046c3cff35b38e0fac17e9d0796d274e7b0e90476253b60cd525367a4f2846d55ed116df5e84d72aa449ac38863f8b80a04699204882a64fbaff4b2aeafd26d72ad7ee3bad3a6a1b474a280bd1dda5b992dc84e788787a6fafcbb17759fb7d38470b0e6c4a5c83c069b814b2418d8140dd5863716c0d5eb041a4050ac9320e3c4fb67c72aea5612f88a8eac64a48e20c9f6080a398f580ac972b2c3869ae966616a11adfcff933f48c0605c9841b123a3b4d2bb0172fc0f202ee1de85b3bd6eeac09ac1cd1c95915276fe1d0f00679d09e1dc393fe1491e6cddcdce4cb835696a1d784e07fbc6696b0098a504f0faff5b3778cc57495e63eb466ccfd1212699acf6aad4488f4f4de4156f9411c759e1e1d6df2797f27858e4281304eaa9adace41598b340e61af2c3924a812dd4e0d9a9b7a9663fa0968dee73aaa0f183024191cf6915e27018756a6125a6c9682848fe4742ff290805eba911757a4c5901d6bd1d475e165d5a3d03327683411b30961a2a6c6e28494e2e686bc400c2bd0ffb6ca7786dd471eba8e75ea73b4c0a19026d334d5043046c9e535f4531434378e7805bbc9e625677ce26a73c9ec978fa0cc13a0c99a5991640c6e4dc3d7d8928e098cf1067e72a17ccbfddae5c1ee42e57f981ffafa36d23c9018f2a1224320baa73a7e50ea6cb7d5e1a93ad67ca62a77097f7f14aec11c54bb4e246390bc1e44691762e0f6cb8a39bc47d18bc9c5dcc01c5a7244e4172d2d75a5bf3505ff6dfb543a9d8bd58834091ede24cc117788c634be77ebac2efff7208fc1d35f264c7584fb8218b7401b8f4a06784a4331da680073aa5b9d62688baa4b512462ee206789fb207364a61e900ad17ae7d011ecdf987a621bd7351ce178f56aa1b75d57896832b88525675cbf873032f4c74cb751a0fc6498cf5fee6d748dc0145db1e779bbfdc270833e9a62102f5eff25f1d9"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="066af125e2c91b7f2ed03aa6c1da410df870d06e968dc2bfd0e7441487e82dabe036765d2f2cb500049d54f3278602c4b60e45c2f4ca6b092701700b541650fcd7f1766a8d9e0491a8d8c3d88a068f2bd5650f9de3e7ceaa91475fc8a8e3b6a44f842352690b19c1ef697e38b98d16ed23f99e3316d1a147505ccfcedfd6c20acfca09a42d7433b7740c027e2e852bc67a3ad8e572bec28599a2577a179026a929e91a638c2001c5e9e9025b4786a9d347c6207818c2e89c41bffbc411d137afc30cd79fe720f11987bc50e4cc8daace41b43f5a8bdb7d131786e4a1153b9b3b3916b8d0a9b0050711c0ccec8c364993aed3e1792182c4222796498cf65814401a31207a98ddb2c5293005d9dc70fea3cb7ceeeca7fb805c9abe1a401f0c1e73e761714319f22b25275c919065ac4a1ccb48bf727ea3905b1e94a8266e0f5714b195a7c02410a2a026097a6676f5cead54605aa82213c46bed685ff40a7ecedbe227050c017bb72e99ffbcec88bd41688bc93f2015d98e585b517aae96b9b208c61419f4bdba2300e728887deacaf9aa1f96b2e1c63a882995c6dac7022e8990204ea73ad6d5314e56ec60c77cfb3e1aa6a81e50781ec9a25eebae3b5d007214f9742129333aabc889a52c089b841162ec549982384503990f989d1338ba76569d9a35f69e9ed3a3a094c38f05d022a0d70483ded738c6b2795415b1731b5c550cec6d5377510cae3c426d4447fff0a90d3a9a2bbdf0491b5abfd82ef3ee936d790ea5ea74ef88cd84f402ca139569750e5c99dc6409d6bd7c6e2892d5f9ee22a90accb56019961d86cb66332837a1c2006db699c6bb3adc856f241804f374d41746853c713e93f23c280f21ce4c8bc74cb3959c9ac43b8715de1343d4b569219f01266f4ccad992f5b045a235997e69160cd70ebf29c34a025834dd933bc7d19c9501407fcbcc3102599f64ce915a5ff530eb8a21a480c396b5b409ab33a08e9fcafb875b91dfb80cdc2368c874ee950d98a838fad581fc2458740cde5d8fe02df6f8c7f66bfd78a51216cb986381f191767fa7b560246d46f70eda1f2c794b89f1680ffed9feb09c7baf5c381defa31c2d64861660ee4d6d37077e167fafb3b6e5d9814bae0ad0d8aba3a5bc9dbcd422b96931c6f2039f5468951706afd1a28cc72c438d6a10e77d495ab4c91e8c9cf68a83ee38243cbdb3d0575c8c3d78bcf420e74e777881640c8a4801880297405006332d38f29b2eb156692e2eedc07328bdf7af8ec5e962e4a76e79f01fd134695e74a513dd25f8269dd6b4b28cad2fffbeccfc1e62c9ea537dbeabd262e81b31f63e23534337b999624da9e29c6c3d86fb3ced06d9d219c352a13dc7ec9c2b57dfeb1060eae93b0a878aba217b7cb5aa278c66f21dd66925add55fd7d808ae77dfd7bf027e95923f7fd918fa22f4a1"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000d80)) 15:52:02 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x1) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27d40000, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x200000c0) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:03 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:03 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000bc0)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000d80)) 15:52:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:03 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0xffff, 0x2, 0xd32, 0x0, 0xd, "7ff08b455104b2fa"}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:03 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:03 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:03 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:13 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:52:13 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:13 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:13 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="6c1c943868853d7ff2d10032d51965d9206da7f2dd7ca4c7fe5b752d4e83db62ffe453c61cc44d1aaae407bc956063dfaae48d9c554bc406b805af56585b216c9886680c49580354d3245075cf0c7bbabf3fc61741985d7e4d2a56c4779d83995a0ee36a5fbbd4184a8663c55288f7788f713589992e7ad6b1ac2fc5a8cfaeb6d85e1797e51e88bd982383066caa296ded4696f91c686582cf8761bedb9dc05e26f135ad8a287f7ac26ad87ac0bdd10f0d72f652b6b952c2894d0b0ad7f6a406e7a9a8a973f14e1a01733602cb31407330b42e6ae03326d8b9c14fc36df99fc15ff3b3e8dd3c2ae19c9755b8745a056ccf35ba21ae686a0615a4d5081d25fcc7caadb3c0a2d936d3a53980c67edf0cbd5086b61b801ee30eb5e19850e24be028de2c59ef369221faf096706288afb7146f277760e69d21dd2086e12791109922c137db5a8e650c04408a22f5ab11088289e4046c3cff35b38e0fac17e9d0796d274e7b0e90476253b60cd525367a4f2846d55ed116df5e84d72aa449ac38863f8b80a04699204882a64fbaff4b2aeafd26d72ad7ee3bad3a6a1b474a280bd1dda5b992dc84e788787a6fafcbb17759fb7d38470b0e6c4a5c83c069b814b2418d8140dd5863716c0d5eb041a4050ac9320e3c4fb67c72aea5612f88a8eac64a48e20c9f6080a398f580ac972b2c3869ae966616a11adfcff933f48c0605c9841b123a3b4d2bb0172fc0f202ee1de85b3bd6eeac09ac1cd1c95915276fe1d0f00679d09e1dc393fe1491e6cddcdce4cb835696a1d784e07fbc6696b0098a504f0faff5b3778cc57495e63eb466ccfd1212699acf6aad4488f4f4de4156f9411c759e1e1d6df2797f27858e4281304eaa9adace41598b340e61af2c3924a812dd4e0d9a9b7a9663fa0968dee73aaa0f183024191cf6915e27018756a6125a6c9682848fe4742ff290805eba911757a4c5901d6bd1d475e165d5a3d03327683411b30961a2a6c6e28494e2e686bc400c2bd0ffb6ca7786dd471eba8e75ea73b4c0a19026d334d5043046c9e535f4531434378e7805bbc9e625677ce26a73c9ec978fa0cc13a0c99a5991640c6e4dc3d7d8928e098cf1067e72a17ccbfddae5c1ee42e57f981ffafa36d23c9018f2a1224320baa73a7e50ea6cb7d5e1a93ad67ca62a77097f7f14aec11c54bb4e246390bc1e44691762e0f6cb8a39bc47d18bc9c5dcc01c5a7244e4172d2d75a5bf3505ff6dfb543a9d8bd58834091ede24cc117788c634be77ebac2efff7208fc1d35f264c7584fb8218b7401b8f4a06784a4331da680073aa5b9d62688baa4b512462ee206789fb207364a61e900ad17ae7d011ecdf987a621bd7351ce178f56aa1b75d57896832b88525675cbf873032f4c74cb751a0fc6498cf5fee6d748dc0145db1e779bbfdc270833e9a62102f5eff25f1d9"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b80)={0xf6, 0x10, &(0x7f0000000780)="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"}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000d80)) 15:52:13 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) timerfd_gettime(r0, &(0x7f00000001c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:13 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x24, 0x7, 0xf, 0x2, 0xfd, 0x1, 0x82, 0x1}}) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:13 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x20009045) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000580)={0x1, 0x623b, 0x1000, 0x9, 0xb, "385b453beb6bedde4b99227076eba4b449f6c7"}) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:13 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5, 0x401, &(0x7f0000000180)={r1, r2+60000000}) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:13 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x50080) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:13 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) pipe(&(0x7f0000000740)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000d80)) 15:52:22 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x6, 0x2, 0x1dd}) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:22 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) connect$packet(r2, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x60, 0x6, @broadcast}, 0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:22 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000d80)) 15:52:22 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:22 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:22 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x720, 0x70bd29, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:52:22 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:22 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc098}, 0x84) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:22 executing program 1: getitimer(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0xffffffffffffffff) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:22 executing program 4: getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) 15:52:22 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:22 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000d80)) 15:52:22 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:22 executing program 1: getitimer(0x1, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:32 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:32 executing program 4: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001300)) 15:52:32 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:52:32 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:32 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000d80)) 15:52:32 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:32 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:32 executing program 1: getitimer(0x1, &(0x7f0000000000)) io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:32 executing program 4: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 15:52:32 executing program 1: io_getevents(0x0, 0x10000, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:32 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:32 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="6c1c943868853d7ff2d10032d51965d9206da7f2dd7ca4c7fe5b752d4e83db62ffe453c61cc44d1aaae407bc956063dfaae48d9c554bc406b805af56585b216c9886680c49580354d3245075cf0c7bbabf3fc61741985d7e4d2a56c4779d83995a0ee36a5fbbd4184a8663c55288f7788f713589992e7ad6b1ac2fc5a8cfaeb6d85e1797e51e88bd982383066caa296ded4696f91c686582cf8761bedb9dc05e26f135ad8a287f7ac26ad87ac0bdd10f0d72f652b6b952c2894d0b0ad7f6a406e7a9a8a973f14e1a01733602cb31407330b42e6ae03326d8b9c14fc36df99fc15ff3b3e8dd3c2ae19c9755b8745a056ccf35ba21ae686a0615a4d5081d25fcc7caadb3c0a2d936d3a53980c67edf0cbd5086b61b801ee30eb5e19850e24be028de2c59ef369221faf096706288afb7146f277760e69d21dd2086e12791109922c137db5a8e650c04408a22f5ab11088289e4046c3cff35b38e0fac17e9d0796d274e7b0e90476253b60cd525367a4f2846d55ed116df5e84d72aa449ac38863f8b80a04699204882a64fbaff4b2aeafd26d72ad7ee3bad3a6a1b474a280bd1dda5b992dc84e788787a6fafcbb17759fb7d38470b0e6c4a5c83c069b814b2418d8140dd5863716c0d5eb041a4050ac9320e3c4fb67c72aea5612f88a8eac64a48e20c9f6080a398f580ac972b2c3869ae966616a11adfcff933f48c0605c9841b123a3b4d2bb0172fc0f202ee1de85b3bd6eeac09ac1cd1c95915276fe1d0f00679d09e1dc393fe1491e6cddcdce4cb835696a1d784e07fbc6696b0098a504f0faff5b3778cc57495e63eb466ccfd1212699acf6aad4488f4f4de4156f9411c759e1e1d6df2797f27858e4281304eaa9adace41598b340e61af2c3924a812dd4e0d9a9b7a9663fa0968dee73aaa0f183024191cf6915e27018756a6125a6c9682848fe4742ff290805eba911757a4c5901d6bd1d475e165d5a3d03327683411b30961a2a6c6e28494e2e686bc400c2bd0ffb6ca7786dd471eba8e75ea73b4c0a19026d334d5043046c9e535f4531434378e7805bbc9e625677ce26a73c9ec978fa0cc13a0c99a5991640c6e4dc3d7d8928e098cf1067e72a17ccbfddae5c1ee42e57f981ffafa36d23c9018f2a1224320baa73a7e50ea6cb7d5e1a93ad67ca62a77097f7f14aec11c54bb4e246390bc1e44691762e0f6cb8a39bc47d18bc9c5dcc01c5a7244e4172d2d75a5bf3505ff6dfb543a9d8bd58834091ede24cc117788c634be77ebac2efff7208fc1d35f264c7584fb8218b7401b8f4a06784a4331da680073aa5b9d62688baa4b512462ee206789fb207364a61e900ad17ae7d011ecdf987a621bd7351ce178f56aa1b75d57896832b88525675cbf873032f4c74cb751a0fc6498cf5fee6d748dc0145db1e779bbfdc270833e9a62102f5eff25f1d9"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000d80)) 15:52:32 executing program 1: io_getevents(0x0, 0x0, 0x1, &(0x7f0000000600)=[{}], 0x0) 15:52:32 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x840) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:32 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000d80)) 15:52:32 executing program 1: io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 15:52:32 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:32 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:52:32 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:32 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) syz_open_dev$sg(&(0x7f00000000c0), 0x9f09, 0x2000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) [ 175.768354] [ 175.768703] ===================================== [ 175.769422] WARNING: bad unlock balance detected! [ 175.770138] 6.19.0-rc5-next-20260115 #1 Not tainted [ 175.770822] ------------------------------------- [ 175.771490] syz-executor.6/4567 is trying to release lock (rcu_read_lock) at: [ 175.772952] [] __wait_on_freeing_inode+0x105/0x350 [ 175.774203] but there are no more locks to release! [ 175.775377] [ 175.775377] other info that might help us debug this: [ 175.776640] 4 locks held by syz-executor.6/4567: [ 175.777626] #0: ffff88800f6b63f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 175.779263] #1: ffff88803b004698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 175.781080] #2: ffff88800f8e2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 175.782690] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 175.785008] [ 175.785008] stack backtrace: [ 175.785856] CPU: 0 UID: 0 PID: 4567 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 175.785883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 175.785896] Call Trace: [ 175.785903] [ 175.785911] dump_stack_lvl+0xca/0x120 [ 175.785953] ? __wait_on_freeing_inode+0x105/0x350 [ 175.785980] print_unlock_imbalance_bug+0x118/0x130 [ 175.786006] ? __wait_on_freeing_inode+0x105/0x350 [ 175.786032] lock_release+0x1ee/0x270 [ 175.786059] __wait_on_freeing_inode+0x10a/0x350 [ 175.786086] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 175.786114] ? __pfx_var_wake_function+0x10/0x10 [ 175.786146] ? lock_is_held_type+0x9e/0x120 [ 175.786167] insert_inode_locked+0x25f/0x890 [ 175.786198] __ext4_new_inode+0x223d/0x4cd0 [ 175.786228] ? __pfx___ext4_new_inode+0x10/0x10 [ 175.786254] ? __pfx___dquot_initialize+0x10/0x10 [ 175.786287] ? __pfx_avc_has_perm+0x10/0x10 [ 175.786314] ext4_symlink+0x623/0xb40 [ 175.786348] ? __pfx_ext4_symlink+0x10/0x10 [ 175.786377] ? security_inode_permission+0x72/0xe0 [ 175.786400] vfs_symlink+0x44b/0x840 [ 175.786430] filename_symlinkat+0x158/0x440 [ 175.786456] ? __pfx_filename_symlinkat+0x10/0x10 [ 175.786480] ? strncpy_from_user+0x21b/0x2f0 [ 175.786510] __x64_sys_symlink+0x82/0x110 [ 175.786535] do_syscall_64+0xbf/0x420 [ 175.786558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.786580] RIP: 0033:0x7fa54e066427 [ 175.786597] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 175.786617] RSP: 002b:00007ffffa289a88 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 175.786637] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa54e066427 [ 175.786650] RDX: 00007ffffa289b63 RSI: 00007fa54e0c1022 RDI: 00007ffffa289b50 [ 175.786664] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffffa289920 [ 175.786677] R10: 00007ffffa2897d7 R11: 0000000000000206 R12: 0000000000000001 [ 175.786689] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffffa289b50 [ 175.786709] [ 175.815366] ------------[ cut here ]------------ [ 175.816131] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/4567 [ 175.817755] Modules linked in: [ 175.818313] CPU: 0 UID: 0 PID: 4567 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 175.821664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 175.824332] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 175.825265] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 175.827928] RSP: 0018:ffff888046d5f9a0 EFLAGS: 00010286 [ 175.828693] RAX: 00000000ffffffff RBX: ffff888046db8000 RCX: ffffffff815660f7 [ 175.829928] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888046db83fc [ 175.831106] RBP: ffff888046db8000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 175.832220] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046db8000 [ 175.833323] R13: 0000000000000001 R14: ffffffff85c0ced0 R15: ffff88803b0ef578 [ 175.834418] FS: 0000555579d92400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 175.835655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.836570] CR2: 00007f650546d269 CR3: 000000001ef27000 CR4: 0000000000350ef0 [ 175.837673] Call Trace: [ 175.838195] [ 175.839537] __wait_on_freeing_inode+0x10f/0x350 [ 175.840933] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 175.842982] ? __pfx_var_wake_function+0x10/0x10 [ 175.845315] ? lock_is_held_type+0x9e/0x120 [ 175.847410] insert_inode_locked+0x25f/0x890 [ 175.850483] __ext4_new_inode+0x223d/0x4cd0 [ 175.855208] ? __pfx___ext4_new_inode+0x10/0x10 [ 175.857526] ? __pfx___dquot_initialize+0x10/0x10 [ 175.859019] ? __pfx_avc_has_perm+0x10/0x10 [ 175.862482] ext4_symlink+0x623/0xb40 [ 175.866737] ? __pfx_ext4_symlink+0x10/0x10 [ 175.868672] ? security_inode_permission+0x72/0xe0 [ 175.871748] vfs_symlink+0x44b/0x840 [ 175.874231] filename_symlinkat+0x158/0x440 [ 175.876380] ? __pfx_filename_symlinkat+0x10/0x10 [ 175.877806] ? strncpy_from_user+0x21b/0x2f0 [ 175.881427] __x64_sys_symlink+0x82/0x110 [ 175.882789] do_syscall_64+0xbf/0x420 [ 175.884363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.885362] RIP: 0033:0x7fa54e066427 [ 175.886093] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 175.888753] RSP: 002b:00007ffffa289a88 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 175.889917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa54e066427 [ 175.891016] RDX: 00007ffffa289b63 RSI: 00007fa54e0c1022 RDI: 00007ffffa289b50 [ 175.892204] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffffa289920 [ 175.893306] R10: 00007ffffa2897d7 R11: 0000000000000206 R12: 0000000000000001 [ 175.894412] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffffa289b50 [ 175.899380] [ 175.899734] irq event stamp: 321 [ 175.900301] hardirqs last enabled at (321): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 175.901898] hardirqs last disabled at (320): [] _raw_spin_lock_irqsave+0x53/0x60 [ 175.903390] softirqs last enabled at (316): [] kernel_fpu_end+0x59/0x70 [ 175.904762] softirqs last disabled at (314): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 175.906323] ---[ end trace 0000000000000000 ]--- 15:52:41 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000d80)) 15:52:41 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x40}}, 0x20000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000805) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc000002}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 15:52:41 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x118, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24008840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40810) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 15:52:41 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:41 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000d80)) 15:52:41 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x44001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4880) 15:52:41 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x19, 0x39, 0x9, 0x11, 0xb, 0xfffffff9, 0x0, 0xbd}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:41 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xa3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xf10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x189100, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24040800) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 15:52:41 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60e000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x3, 0x20, 0x0, 0x8, 0x1f, 0xffffff55, 0x6803f507}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x418080, 0x0) 15:52:41 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x0, 0xdde, 0x101, 0xc, "22ed320192cf5257"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8000, 0x8000, 0x7, 0x7fff, 0x5, "448c0280a22db8757d94a9ed9b6ca51a9927c8"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x1b1, 0xb, &(0x7f00000000c0)="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"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0xc0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000d80)) VM DIAGNOSIS: 15:52:33 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888046d5f430 R8 =0000000000000000 R9 =ffffed100159e046 R10=00000000000fe503 R11=666666203a332320 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff113838e R15=dffffc0000000000 RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555579d92400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f650546d269 CR3=000000001ef27000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f68fb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001ed1f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f68fb78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555588ec8400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555588ed1c58 CR3=000000000db68000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000