Warning: Permanently added '[localhost]:19546' (ECDSA) to the list of known hosts. 2026/01/16 18:04:31 fuzzer started 2026/01/16 18:04:31 dialing manager at localhost:42157 syzkaller login: [ 51.174262] cgroup: Unknown subsys name 'net' [ 51.268383] cgroup: Unknown subsys name 'cpuset' [ 51.289193] cgroup: Unknown subsys name 'rlimit' 2026/01/16 18:04:43 syscalls: 201 2026/01/16 18:04:43 code coverage: enabled 2026/01/16 18:04:43 comparison tracing: enabled 2026/01/16 18:04:43 extra coverage: enabled 2026/01/16 18:04:43 setuid sandbox: enabled 2026/01/16 18:04:43 namespace sandbox: enabled 2026/01/16 18:04:43 Android sandbox: enabled 2026/01/16 18:04:43 fault injection: enabled 2026/01/16 18:04:43 leak checking: enabled 2026/01/16 18:04:43 net packet injection: enabled 2026/01/16 18:04:43 net device setup: enabled 2026/01/16 18:04:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 18:04:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 18:04:43 USB emulation: enabled 2026/01/16 18:04:43 hci packet injection: enabled 2026/01/16 18:04:43 wifi device emulation: enabled 2026/01/16 18:04:43 802.15.4 emulation: enabled 2026/01/16 18:04:43 fetching corpus: 0, signal 0/0 (executing program) 2026/01/16 18:04:44 starting 8 fuzzer processes 18:04:44 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000003100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000003140)=""/129) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000003200)={r5, 0x0, 0x1}) 18:04:44 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x40000004) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4008000) 18:04:44 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/114, 0x72}], 0x5, &(0x7f0000000700)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/178, 0xb2}, {&(0x7f0000000dc0)=""/74, 0x4a}], 0xa, &(0x7f0000000f00)=""/122, 0x7a}, 0x9}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/72, 0x48}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/120, 0x78}, {&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/67, 0x43}], 0x8, &(0x7f00000033c0)=""/239, 0xef}, 0x9}], 0x3, 0x6122, &(0x7f00000035c0)={r5, r6+10000000}) r7 = socket$inet(0x2, 0x4, 0x3) getsockname$inet(r7, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:04:44 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) r6 = socket(0x26, 0x0, 0xff) r7 = syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005500)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000005a00)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005600)={0x3b4, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x1, 0x2b, 0x5}, {0xffce, 0x1f, 0x1}, {0x1, 0x8, 0x4, 0x62cb717a}, {0x3, 0x9, 0xb2, 0x582}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb602}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x561}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4145f1eb}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x3, 0x4, 0x1}, {0x40, 0x55, 0x7f, 0x2}, {0x6, 0xa5, 0x7f, 0x7fffffff}, {0xfff9, 0x2, 0x81, 0x898}, {0x8, 0xed, 0x81, 0x7}, {0x48, 0xaa, 0x7f, 0x622}, {0x9, 0xff, 0x20, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000014240)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000014200)={&(0x7f00000134c0)={0xd28, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e8}}, {0x8, 0x6, r9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x3, 0x32}, {0x3, 0xf9, 0x5, 0x1}, {0x1, 0x5, 0x0, 0x3}, {0x4, 0x6, 0x0, 0x1d8}, {0xd0c, 0x7, 0x81, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x401, 0x5, 0x2, 0xffff}, {0x6, 0xfa, 0x1, 0x4}, {0x7ff, 0x8, 0x95, 0x2}]}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x80, 0x6, 0xff}, {0x1f, 0x85, 0x7f, 0xfffffff7}, {0xd1d, 0x4, 0x1c, 0x200040}, {0x8, 0x80, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff9, 0x81, 0x4, 0x7fff}, {0x8000, 0x7, 0x9}, {0x2, 0x0, 0x0, 0x1ff}, {0xc6, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x5}, {0x8, 0x5, 0xff, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51acf8b3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x3, 0x7f, 0x10000}, {0x6, 0x7f, 0x8, 0x80}, {0xf, 0x8, 0x6, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x18a8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe9b7}}, {0x8}}}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) 18:04:44 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r14, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000008400)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000008480)={0x0, @ethernet={0x1, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, @isdn={0x22, 0x3, 0x80, 0x0, 0x93}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000008440)='bond_slave_1\x00', 0x5, 0x1, 0x5}) recvmmsg$unix(r6, &(0x7f0000009a80)=[{{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008580), 0x0, &(0x7f00000085c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008600)=@abs, 0x6e, &(0x7f0000009940)=[{&(0x7f0000008680)=""/89, 0x59}, {&(0x7f0000008700)=""/165, 0xa5}, {&(0x7f00000087c0)=""/116, 0x74}, {&(0x7f0000008840)=""/231, 0xe7}, {&(0x7f0000008940)=""/4096, 0x1000}], 0x5, &(0x7f00000099c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2000, 0x0) recvfrom$packet(r15, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r11, 0x1, 0x80, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000009c40)) 18:04:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:04:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44804}, 0x8001) [ 62.974966] audit: type=1400 audit(1768586684.663:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:04:44 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004000)={'wpan0\x00'}) [ 64.164963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.167233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.169240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.175587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.177771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.305307] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.306962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.311052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.312703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.314358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.314765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.323938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.325571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.327215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.328345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.368109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.371130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.374448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.375152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.377257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.379707] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.381527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.385128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.385931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.387116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.392007] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.393149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.402012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.410213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.414250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.420150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.423229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.424474] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.431212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.433563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.435943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.475857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.481568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.493153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.504072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.199238] Bluetooth: hci0: command tx timeout [ 66.389895] Bluetooth: hci2: command tx timeout [ 66.391182] Bluetooth: hci1: command tx timeout [ 66.455095] Bluetooth: hci4: command tx timeout [ 66.455832] Bluetooth: hci5: command tx timeout [ 66.520561] Bluetooth: hci6: command tx timeout [ 66.520584] Bluetooth: hci3: command tx timeout [ 66.581892] Bluetooth: hci7: command tx timeout [ 68.245984] Bluetooth: hci0: command tx timeout [ 68.437930] Bluetooth: hci2: command tx timeout [ 68.437985] Bluetooth: hci1: command tx timeout [ 68.502879] Bluetooth: hci4: command tx timeout [ 68.502925] Bluetooth: hci5: command tx timeout [ 68.565933] Bluetooth: hci3: command tx timeout [ 68.565952] Bluetooth: hci6: command tx timeout [ 68.629828] Bluetooth: hci7: command tx timeout [ 70.294813] Bluetooth: hci0: command tx timeout [ 70.486822] Bluetooth: hci1: command tx timeout [ 70.486856] Bluetooth: hci2: command tx timeout [ 70.550991] Bluetooth: hci4: command tx timeout [ 70.551729] Bluetooth: hci5: command tx timeout [ 70.614449] Bluetooth: hci3: command tx timeout [ 70.614824] Bluetooth: hci6: command tx timeout [ 70.679032] Bluetooth: hci7: command tx timeout [ 72.341959] Bluetooth: hci0: command tx timeout [ 72.533991] Bluetooth: hci1: command tx timeout [ 72.534893] Bluetooth: hci2: command tx timeout [ 72.599030] Bluetooth: hci4: command tx timeout [ 72.599707] Bluetooth: hci5: command tx timeout [ 72.662030] Bluetooth: hci6: command tx timeout [ 72.662877] Bluetooth: hci3: command tx timeout [ 72.726842] Bluetooth: hci7: command tx timeout [ 100.814215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.815436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.981262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.981900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.121041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.121663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.173409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.174046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.273251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.273874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.370956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.371588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.494577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.495941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.501568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.502277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.554070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.554708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.579967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.580571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.680205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.680818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.787138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.787746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.953705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.954339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.954934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.954954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.086103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.086720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:05:23 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x40000004) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4008000) [ 102.219254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.219897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:05:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44804}, 0x8001) 18:05:24 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r14, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000008400)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000008480)={0x0, @ethernet={0x1, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, @isdn={0x22, 0x3, 0x80, 0x0, 0x93}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000008440)='bond_slave_1\x00', 0x5, 0x1, 0x5}) recvmmsg$unix(r6, &(0x7f0000009a80)=[{{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008580), 0x0, &(0x7f00000085c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008600)=@abs, 0x6e, &(0x7f0000009940)=[{&(0x7f0000008680)=""/89, 0x59}, {&(0x7f0000008700)=""/165, 0xa5}, {&(0x7f00000087c0)=""/116, 0x74}, {&(0x7f0000008840)=""/231, 0xe7}, {&(0x7f0000008940)=""/4096, 0x1000}], 0x5, &(0x7f00000099c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2000, 0x0) recvfrom$packet(r15, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r11, 0x1, 0x80, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000009c40)) 18:05:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:05:24 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x40000004) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4008000) 18:05:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44804}, 0x8001) 18:05:33 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r14, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000008400)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000008480)={0x0, @ethernet={0x1, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, @isdn={0x22, 0x3, 0x80, 0x0, 0x93}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000008440)='bond_slave_1\x00', 0x5, 0x1, 0x5}) recvmmsg$unix(r6, &(0x7f0000009a80)=[{{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008580), 0x0, &(0x7f00000085c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008600)=@abs, 0x6e, &(0x7f0000009940)=[{&(0x7f0000008680)=""/89, 0x59}, {&(0x7f0000008700)=""/165, 0xa5}, {&(0x7f00000087c0)=""/116, 0x74}, {&(0x7f0000008840)=""/231, 0xe7}, {&(0x7f0000008940)=""/4096, 0x1000}], 0x5, &(0x7f00000099c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2000, 0x0) recvfrom$packet(r15, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r11, 0x1, 0x80, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000009c40)) 18:05:33 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000003100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000003140)=""/129) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000003200)={r5, 0x0, 0x1}) 18:05:33 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) r6 = socket(0x26, 0x0, 0xff) r7 = syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005500)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000005a00)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005600)={0x3b4, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x1, 0x2b, 0x5}, {0xffce, 0x1f, 0x1}, {0x1, 0x8, 0x4, 0x62cb717a}, {0x3, 0x9, 0xb2, 0x582}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb602}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x561}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4145f1eb}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x3, 0x4, 0x1}, {0x40, 0x55, 0x7f, 0x2}, {0x6, 0xa5, 0x7f, 0x7fffffff}, {0xfff9, 0x2, 0x81, 0x898}, {0x8, 0xed, 0x81, 0x7}, {0x48, 0xaa, 0x7f, 0x622}, {0x9, 0xff, 0x20, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000014240)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000014200)={&(0x7f00000134c0)={0xd28, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e8}}, {0x8, 0x6, r9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x3, 0x32}, {0x3, 0xf9, 0x5, 0x1}, {0x1, 0x5, 0x0, 0x3}, {0x4, 0x6, 0x0, 0x1d8}, {0xd0c, 0x7, 0x81, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x401, 0x5, 0x2, 0xffff}, {0x6, 0xfa, 0x1, 0x4}, {0x7ff, 0x8, 0x95, 0x2}]}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x80, 0x6, 0xff}, {0x1f, 0x85, 0x7f, 0xfffffff7}, {0xd1d, 0x4, 0x1c, 0x200040}, {0x8, 0x80, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff9, 0x81, 0x4, 0x7fff}, {0x8000, 0x7, 0x9}, {0x2, 0x0, 0x0, 0x1ff}, {0xc6, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x5}, {0x8, 0x5, 0xff, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51acf8b3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x3, 0x7f, 0x10000}, {0x6, 0x7f, 0x8, 0x80}, {0xf, 0x8, 0x6, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x18a8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe9b7}}, {0x8}}}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) 18:05:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:05:33 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/114, 0x72}], 0x5, &(0x7f0000000700)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/178, 0xb2}, {&(0x7f0000000dc0)=""/74, 0x4a}], 0xa, &(0x7f0000000f00)=""/122, 0x7a}, 0x9}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/72, 0x48}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/120, 0x78}, {&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/67, 0x43}], 0x8, &(0x7f00000033c0)=""/239, 0xef}, 0x9}], 0x3, 0x6122, &(0x7f00000035c0)={r5, r6+10000000}) r7 = socket$inet(0x2, 0x4, 0x3) getsockname$inet(r7, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:05:33 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r14, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000008400)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000008480)={0x0, @ethernet={0x1, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, @isdn={0x22, 0x3, 0x80, 0x0, 0x93}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000008440)='bond_slave_1\x00', 0x5, 0x1, 0x5}) recvmmsg$unix(r6, &(0x7f0000009a80)=[{{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008580), 0x0, &(0x7f00000085c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008600)=@abs, 0x6e, &(0x7f0000009940)=[{&(0x7f0000008680)=""/89, 0x59}, {&(0x7f0000008700)=""/165, 0xa5}, {&(0x7f00000087c0)=""/116, 0x74}, {&(0x7f0000008840)=""/231, 0xe7}, {&(0x7f0000008940)=""/4096, 0x1000}], 0x5, &(0x7f00000099c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2000, 0x0) recvfrom$packet(r15, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r11, 0x1, 0x80, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000009c40)) 18:05:33 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004000)={'wpan0\x00'}) 18:05:33 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x40000004) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4008000) 18:05:33 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r14, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000008400)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000008480)={0x0, @ethernet={0x1, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, @isdn={0x22, 0x3, 0x80, 0x0, 0x93}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000008440)='bond_slave_1\x00', 0x5, 0x1, 0x5}) recvmmsg$unix(r6, &(0x7f0000009a80)=[{{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008580), 0x0, &(0x7f00000085c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008600)=@abs, 0x6e, &(0x7f0000009940)=[{&(0x7f0000008680)=""/89, 0x59}, {&(0x7f0000008700)=""/165, 0xa5}, {&(0x7f00000087c0)=""/116, 0x74}, {&(0x7f0000008840)=""/231, 0xe7}, {&(0x7f0000008940)=""/4096, 0x1000}], 0x5, &(0x7f00000099c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2000, 0x0) recvfrom$packet(r15, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r11, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000003100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000003140)=""/129) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000003200)={r5, 0x0, 0x1}) 18:05:34 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r13, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000008400)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000008480)={0x0, @ethernet={0x1, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, @isdn={0x22, 0x3, 0x80, 0x0, 0x93}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000008440)='bond_slave_1\x00', 0x5, 0x1, 0x5}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r10, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44804}, 0x8001) 18:05:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x40000004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:05:34 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r13, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000008400)) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r10, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:05:34 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000082c0)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000008300)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x7399, 0x4e22, 0xfff, 0x2, 0xa0, 0x80, 0x16, r12, r1}, {0x3, 0x5, 0xfffffffffffffffe, 0x2d, 0x5, 0x76b, 0x7ff}, {0x7, 0x0, 0x1, 0x9}, 0x5a66b83b, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xe0, 0x101, 0x3, 0x5}}, 0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r9, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:05:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000003100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000003140)=""/129) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000003200)={r5, 0x0, 0x1}) 18:05:41 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/114, 0x72}], 0x5, &(0x7f0000000700)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/178, 0xb2}, {&(0x7f0000000dc0)=""/74, 0x4a}], 0xa, &(0x7f0000000f00)=""/122, 0x7a}, 0x9}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/72, 0x48}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/120, 0x78}, {&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/67, 0x43}], 0x8, &(0x7f00000033c0)=""/239, 0xef}, 0x9}], 0x3, 0x6122, &(0x7f00000035c0)={r5, r6+10000000}) r7 = socket$inet(0x2, 0x4, 0x3) getsockname$inet(r7, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:05:41 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) r6 = socket(0x26, 0x0, 0xff) r7 = syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005500)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000005a00)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005600)={0x3b4, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x1, 0x2b, 0x5}, {0xffce, 0x1f, 0x1}, {0x1, 0x8, 0x4, 0x62cb717a}, {0x3, 0x9, 0xb2, 0x582}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb602}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x561}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4145f1eb}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x3, 0x4, 0x1}, {0x40, 0x55, 0x7f, 0x2}, {0x6, 0xa5, 0x7f, 0x7fffffff}, {0xfff9, 0x2, 0x81, 0x898}, {0x8, 0xed, 0x81, 0x7}, {0x48, 0xaa, 0x7f, 0x622}, {0x9, 0xff, 0x20, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000014240)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000014200)={&(0x7f00000134c0)={0xd28, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e8}}, {0x8, 0x6, r9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x3, 0x32}, {0x3, 0xf9, 0x5, 0x1}, {0x1, 0x5, 0x0, 0x3}, {0x4, 0x6, 0x0, 0x1d8}, {0xd0c, 0x7, 0x81, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x401, 0x5, 0x2, 0xffff}, {0x6, 0xfa, 0x1, 0x4}, {0x7ff, 0x8, 0x95, 0x2}]}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x80, 0x6, 0xff}, {0x1f, 0x85, 0x7f, 0xfffffff7}, {0xd1d, 0x4, 0x1c, 0x200040}, {0x8, 0x80, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff9, 0x81, 0x4, 0x7fff}, {0x8000, 0x7, 0x9}, {0x2, 0x0, 0x0, 0x1ff}, {0xc6, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x5}, {0x8, 0x5, 0xff, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51acf8b3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x3, 0x7f, 0x10000}, {0x6, 0x7f, 0x8, 0x80}, {0xf, 0x8, 0x6, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x18a8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe9b7}}, {0x8}}}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) 18:05:41 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000082c0)) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r7, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:41 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:05:41 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004000)={'wpan0\x00'}) 18:05:41 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:05:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) 18:05:41 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000003100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000003140)=""/129) 18:05:41 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000008100)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000008280)={0x0, 0x6}, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r6, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:41 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000003100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:05:42 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000003100)) 18:05:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) 18:05:42 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:05:42 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000008100)) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r5, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:42 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:05:42 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:05:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) 18:05:50 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/114, 0x72}], 0x5, &(0x7f0000000700)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/178, 0xb2}, {&(0x7f0000000dc0)=""/74, 0x4a}], 0xa, &(0x7f0000000f00)=""/122, 0x7a}, 0x9}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/72, 0x48}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/120, 0x78}, {&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/67, 0x43}], 0x8, &(0x7f00000033c0)=""/239, 0xef}, 0x9}], 0x3, 0x6122, &(0x7f00000035c0)={r5, r6+10000000}) r7 = socket$inet(0x2, 0x4, 0x3) getsockname$inet(r7, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:05:50 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:05:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002d00)={0x1, &(0x7f0000002cc0)=[{0x1ff, 0x6, 0xdc, 0x8}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:05:50 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004000)={'wpan0\x00'}) 18:05:50 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) r6 = socket(0x26, 0x0, 0xff) r7 = syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005500)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000005a00)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005600)={0x3b4, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x1, 0x2b, 0x5}, {0xffce, 0x1f, 0x1}, {0x1, 0x8, 0x4, 0x62cb717a}, {0x3, 0x9, 0xb2, 0x582}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb602}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x561}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4145f1eb}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x3, 0x4, 0x1}, {0x40, 0x55, 0x7f, 0x2}, {0x6, 0xa5, 0x7f, 0x7fffffff}, {0xfff9, 0x2, 0x81, 0x898}, {0x8, 0xed, 0x81, 0x7}, {0x48, 0xaa, 0x7f, 0x622}, {0x9, 0xff, 0x20, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000014240)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000014200)={&(0x7f00000134c0)={0xd28, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e8}}, {0x8, 0x6, r9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x3, 0x32}, {0x3, 0xf9, 0x5, 0x1}, {0x1, 0x5, 0x0, 0x3}, {0x4, 0x6, 0x0, 0x1d8}, {0xd0c, 0x7, 0x81, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x401, 0x5, 0x2, 0xffff}, {0x6, 0xfa, 0x1, 0x4}, {0x7ff, 0x8, 0x95, 0x2}]}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x80, 0x6, 0xff}, {0x1f, 0x85, 0x7f, 0xfffffff7}, {0xd1d, 0x4, 0x1c, 0x200040}, {0x8, 0x80, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff9, 0x81, 0x4, 0x7fff}, {0x8000, 0x7, 0x9}, {0x2, 0x0, 0x0, 0x1ff}, {0xc6, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x5}, {0x8, 0x5, 0xff, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51acf8b3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x3, 0x7f, 0x10000}, {0x6, 0x7f, 0x8, 0x80}, {0xf, 0x8, 0x6, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x18a8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe9b7}}, {0x8}}}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) 18:05:50 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80)={0x11, 0x0, 0x0}, &(0x7f0000007ec0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000080c0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)={0x178, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40000) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r4, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:50 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) pipe2(&(0x7f00000030c0), 0x80000) 18:05:50 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) accept$packet(r0, &(0x7f0000007e80), &(0x7f0000007ec0)=0x14) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r1, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:50 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) pipe2(&(0x7f00000030c0), 0x80000) 18:05:50 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007c80)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000007d80)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r1, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:50 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000003040)) pipe2(&(0x7f00000030c0), 0x80000) 18:05:50 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007b40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007c40)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, r1, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:59 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:05:59 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:05:59 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/114, 0x72}], 0x5, &(0x7f0000000700)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/178, 0xb2}, {&(0x7f0000000dc0)=""/74, 0x4a}], 0xa, &(0x7f0000000f00)=""/122, 0x7a}, 0x9}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/72, 0x48}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/120, 0x78}, {&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/67, 0x43}], 0x8, &(0x7f00000033c0)=""/239, 0xef}, 0x9}], 0x3, 0x6122, &(0x7f00000035c0)={r5, r6+10000000}) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:05:59 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) accept$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c80)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:05:59 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007b00)) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:59 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) r6 = socket(0x26, 0x0, 0xff) r7 = syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005500)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000005a00)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005600)={0x3b4, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x1, 0x2b, 0x5}, {0xffce, 0x1f, 0x1}, {0x1, 0x8, 0x4, 0x62cb717a}, {0x3, 0x9, 0xb2, 0x582}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb602}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x561}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4145f1eb}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x3, 0x4, 0x1}, {0x40, 0x55, 0x7f, 0x2}, {0x6, 0xa5, 0x7f, 0x7fffffff}, {0xfff9, 0x2, 0x81, 0x898}, {0x8, 0xed, 0x81, 0x7}, {0x48, 0xaa, 0x7f, 0x622}, {0x9, 0xff, 0x20, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 18:05:59 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/69, 0x45}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/117, 0x75}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x4, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/72, 0x48}], 0x4, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x2000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:05:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:05:59 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:05:59 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) syz_genetlink_get_family_id$ethtool(&(0x7f0000007ac0), r0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:59 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r2 = accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000300)="893a52e028c21cc71ba03ea276e98b291c461b5b56ad43f4c7183afbc6412284b00c127e108c2b2f89317b4f14e31e906afdf06e2446ea582858d8f03d35f0fce0314c2ae954c18cafbecd20dbecdc63c40b2a4437907c59c3b3f10bdb730fab8773d877799b61e1f47da28cd21a4e089c1699ab217296c4c714f2b7a9e74792c41be6867a8e6d9128e65127be3ce3f5ed75fd1e949649650479514185fa0650aa3239e8fab69400d094d0b733f989f0775149d76429470d2ca97d57b1d03db706e408587bebb3f516f911c3513ec390af1f6d630253b620a178baefa5b8ca", 0xdf) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:05:59 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/157, 0x9d}], 0x4, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/52, 0x34}], 0x8, &(0x7f0000001f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/28, 0x1c}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/37, 0x25}, {&(0x7f00000040c0)=""/161, 0xa1}], 0x6}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/230, 0xe6}, {&(0x7f0000004380)=""/62, 0x3e}, {&(0x7f00000043c0)=""/143, 0x8f}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x7}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000048c0)=""/195, 0xc3}, {&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/91, 0x5b}, {&(0x7f0000005c40)=""/53, 0x35}, {&(0x7f0000005c80)=""/3, 0x3}, {&(0x7f0000005cc0)=""/48, 0x30}, {&(0x7f0000005d00)=""/84, 0x54}], 0xa, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/172, 0xac}], 0x2, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006240)=""/33, 0x21}, {&(0x7f0000006280)=""/204, 0xcc}, {&(0x7f0000006380)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000007700)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/26, 0x1a}, {&(0x7f0000006540)=""/69, 0x45}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/144, 0x90}, {&(0x7f0000007680)=""/92, 0x5c}], 0x6, &(0x7f0000007780)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x20022002, &(0x7f0000007a40)={0x0, 0x3938700}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:05:59 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:08 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005500)) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:08 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000003580)) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:08 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r2 = accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:08 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:08 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r5 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:06:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:08 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:08 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:08 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:08 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x3) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:16 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r6, r4, 0x11, &(0x7f0000000780)={0x41, 0x8, 0x5}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:16 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r5 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:06:16 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:16 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:16 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:16 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:16 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:16 executing program 4: recvfrom$packet(0xffffffffffffffff, &(0x7f0000009b00)=""/220, 0xdc, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:16 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:16 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:16 executing program 4: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:16 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:16 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:25 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:25 executing program 4: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000009c00)={0x11, 0x15, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) 18:06:25 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:25 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:25 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:25 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:25 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r5 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000003bc0)) ustat(0x7, &(0x7f0000003c00)) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:06:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:25 executing program 4: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:06:25 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:25 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xd9db) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:25 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:25 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:25 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x3}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:25 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:25 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:34 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:34 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:34 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000080), 0x800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:34 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:06:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000740), 0x8) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:34 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:35 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:43 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:43 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x6bb, 0x9}, 0x1c) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:43 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:43 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:43 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:43 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r6 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000003b80)=0x8) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:06:43 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) socket$packet(0x11, 0x2, 0x300) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:43 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:43 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:43 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:43 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) mlockall(0x2) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) [ 187.799666] Bluetooth: hci3: command 0x0406 tx timeout [ 187.801463] Bluetooth: hci2: command 0x0406 tx timeout [ 187.802555] Bluetooth: hci1: command 0x0406 tx timeout [ 187.803554] Bluetooth: hci6: command 0x0406 tx timeout [ 187.804612] Bluetooth: hci4: command 0x0406 tx timeout [ 187.805581] Bluetooth: hci0: command 0x0406 tx timeout [ 187.807369] Bluetooth: hci5: command 0x0406 tx timeout [ 187.808210] Bluetooth: hci7: command 0x0406 tx timeout 18:06:52 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r4) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:52 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0xd5d0d96d9f7c8939, 0x70bd2a, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:52 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:06:52 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) socket(0x26, 0x0, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) 18:06:52 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:52 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r5 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000003b80)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:06:52 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1b5c4540107ffe9a, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:52 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r4) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:06:52 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x400) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:06:53 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:06:53 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:06:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:06:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:02 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:02 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) 18:07:02 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(&(0x7f00000030c0), 0x80000) 18:07:02 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:07:02 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r5 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000003b80)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:07:02 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r4) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:07:02 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(0x0, 0x80000) 18:07:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:02 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) socket$packet(0x11, 0x3, 0x300) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:07:03 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(0x0, 0x80000) 18:07:03 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(0x0, 0x80000) 18:07:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:11 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:11 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) socket$nl_generic(0x10, 0x3, 0x10) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:11 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) 18:07:11 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(&(0x7f00000030c0), 0x0) 18:07:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:07:11 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) r5 = semget$private(0x0, 0x3, 0x280) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000003b80)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:07:11 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:07:11 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:11 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(&(0x7f00000030c0), 0x0) 18:07:11 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 210.291736] [ 210.291956] ===================================== [ 210.292342] WARNING: bad unlock balance detected! [ 210.292717] 6.19.0-rc5-next-20260116 #1 Not tainted [ 210.293107] ------------------------------------- [ 210.293480] syz-executor.0/4822 is trying to release lock (rcu_read_lock) at: [ 210.294040] [] __wait_on_freeing_inode+0x105/0x350 [ 210.294554] but there are no more locks to release! [ 210.294938] [ 210.294938] other info that might help us debug this: [ 210.295443] 4 locks held by syz-executor.0/4822: [ 210.295809] #0: ffff88800f8903f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 210.296505] #1: ffff888018614698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 210.297290] #2: ffff88800f894950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 210.298816] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 210.300883] [ 210.300883] stack backtrace: [ 210.301905] CPU: 1 UID: 0 PID: 4822 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 210.301919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 210.301926] Call Trace: [ 210.301931] [ 210.301935] dump_stack_lvl+0xca/0x120 [ 210.301966] ? __wait_on_freeing_inode+0x105/0x350 [ 210.301980] print_unlock_imbalance_bug+0x118/0x130 [ 210.301995] ? __wait_on_freeing_inode+0x105/0x350 [ 210.302009] lock_release+0x1ee/0x270 [ 210.302024] __wait_on_freeing_inode+0x10a/0x350 [ 210.302038] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 210.302054] ? __pfx_var_wake_function+0x10/0x10 [ 210.302071] ? lock_is_held_type+0x9e/0x120 [ 210.302083] insert_inode_locked+0x25f/0x890 [ 210.302099] __ext4_new_inode+0x223d/0x4cd0 [ 210.302116] ? __pfx___ext4_new_inode+0x10/0x10 [ 210.302131] ? __pfx___dquot_initialize+0x10/0x10 [ 210.302149] ? __pfx_avc_has_perm+0x10/0x10 [ 210.302165] ext4_symlink+0x623/0xb40 [ 210.302184] ? __pfx_ext4_symlink+0x10/0x10 [ 210.302199] ? security_inode_permission+0x72/0xe0 [ 210.302212] vfs_symlink+0x44b/0x840 [ 210.302228] filename_symlinkat+0x158/0x440 [ 210.302243] ? __pfx_filename_symlinkat+0x10/0x10 [ 210.302256] ? strncpy_from_user+0x21b/0x2f0 [ 210.302273] __x64_sys_symlink+0x82/0x110 [ 210.302287] do_syscall_64+0xbf/0x420 [ 210.302299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.302312] RIP: 0033:0x7fccf04fb427 [ 210.302321] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.302332] RSP: 002b:00007ffe2b7097d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 210.302342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fccf04fb427 [ 210.302350] RDX: ffffffffffffffbc RSI: 00007fccf055600e RDI: 00007fccf05551dd [ 210.302357] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe2b709250 [ 210.302364] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 210.302371] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe2b7098a0 [ 210.302382] [ 210.320265] ------------[ cut here ]------------ [ 210.320636] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/4822 [ 210.321523] Modules linked in: [ 210.321825] CPU: 1 UID: 0 PID: 4822 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 210.322600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 210.323286] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 210.323743] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 210.325203] RSP: 0018:ffff88804869f9a0 EFLAGS: 00010286 [ 210.325620] RAX: 00000000ffffffff RBX: ffff88801bd48000 RCX: ffffffff815660f7 [ 210.326312] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801bd483fc [ 210.326915] RBP: ffff88801bd48000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 210.327468] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801bd48000 [ 210.328072] R13: 0000000000000001 R14: ffffffff85c0e8c0 R15: ffff88803c4debf0 [ 210.328629] FS: 00005555615e2400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 210.329296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.329753] CR2: 00007f5ca81d93a4 CR3: 000000003e09f000 CR4: 0000000000350ef0 [ 210.330350] Call Trace: [ 210.330586] [ 210.331266] __wait_on_freeing_inode+0x10f/0x350 [ 210.331967] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 210.333030] ? __pfx_var_wake_function+0x10/0x10 [ 210.334239] ? lock_is_held_type+0x9e/0x120 [ 210.335321] insert_inode_locked+0x25f/0x890 [ 210.336939] __ext4_new_inode+0x223d/0x4cd0 [ 210.339375] ? __pfx___ext4_new_inode+0x10/0x10 [ 210.340593] ? __pfx___dquot_initialize+0x10/0x10 [ 210.341370] ? __pfx_avc_has_perm+0x10/0x10 [ 210.343142] ext4_symlink+0x623/0xb40 [ 210.345371] ? __pfx_ext4_symlink+0x10/0x10 [ 210.346382] ? security_inode_permission+0x72/0xe0 [ 210.348025] vfs_symlink+0x44b/0x840 [ 210.349293] filename_symlinkat+0x158/0x440 [ 210.350421] ? __pfx_filename_symlinkat+0x10/0x10 [ 210.351203] ? strncpy_from_user+0x21b/0x2f0 [ 210.353073] __x64_sys_symlink+0x82/0x110 [ 210.353826] do_syscall_64+0xbf/0x420 [ 210.354608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.355161] RIP: 0033:0x7fccf04fb427 [ 210.355529] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.357061] RSP: 002b:00007ffe2b7097d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 210.357685] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fccf04fb427 [ 210.358304] RDX: ffffffffffffffbc RSI: 00007fccf055600e RDI: 00007fccf05551dd [ 210.358929] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe2b709250 [ 210.359510] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 210.360132] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe2b7098a0 [ 210.362704] [ 210.362943] irq event stamp: 621 [ 210.363226] hardirqs last enabled at (621): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 210.364106] hardirqs last disabled at (620): [] _raw_spin_lock_irqsave+0x53/0x60 [ 210.364948] softirqs last enabled at (616): [] kernel_fpu_end+0x59/0x70 [ 210.365658] softirqs last disabled at (614): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 210.366461] ---[ end trace 0000000000000000 ]--- 18:07:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:12 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:07:12 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) accept$packet(r2, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:12 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003080), 0x0, 0x0) pipe2(&(0x7f00000030c0), 0x0) 18:07:12 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) accept$packet(r1, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:12 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = fork() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:20 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:07:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:20 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) fork() getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:20 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/167, 0xa7, 0x1, 0x27}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}], 0xa3, 0x0, &(0x7f0000000540)="0e373873ff6bd68ef5e5e172dd6ddd1484d9c3fa66f3c198508124b57a3c067296bc19462a3278f26240aecdceda906c8c7d45ae5f654e73b5e6a4bcb0b4b56b141ce63ded313d7cf005bd0c858014aa8bb7d2162d55687d059ae9317fae3e1b8cf8d2374b4683ac64b368c89046a6a1b858382e1abccd9cb59bf5c99ed94ccbfd28be3298b411ba9e85bfd4a20fdcf9305c29d1e8f91d9225d08cc359280ddab26f2c"}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000005140)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/60, 0x3c}], 0xa, &(0x7f0000001d80)=""/222, 0xde}, 0x2}, {{&(0x7f0000001e80)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/70, 0x46}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/158, 0x9e}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/104, 0x68}], 0xa, &(0x7f0000004500)=""/4, 0x4}, 0xe3bd611}, {{&(0x7f0000004540)=@sco, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/247, 0xf7}], 0x1, &(0x7f0000004700)=""/155, 0x9b}, 0x7}, {{&(0x7f00000047c0)=@caif, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/247, 0xf7}, {&(0x7f0000004940)=""/159, 0x9f}], 0x2, &(0x7f0000004a40)=""/212, 0xd4}, 0x38b}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/26, 0x1a}], 0x1}, 0xffffff80}, {{&(0x7f0000004c40)=@ieee802154, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/227, 0xe3}], 0x1, &(0x7f0000004e00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000004f00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f80)=""/197, 0xc5}], 0x1, &(0x7f00000050c0)=""/120, 0x78}, 0x5}], 0x7, 0x120, &(0x7f0000005300)={0x0, 0x989680}) io_uring_setup(0x36a4, &(0x7f0000005340)={0x0, 0x5072, 0x4, 0x0, 0x2b7, 0x0, r2}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000053c0)=@req={0xddd, 0x7, 0x3, 0x8001}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005440), r4) 18:07:20 executing program 6: ustat(0x3, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = semget$private(0x0, 0x1, 0x11) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000000c0)=0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/215, 0xd7}], 0x2, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/191, 0xbf}, {&(0x7f0000002cc0)=""/168, 0xa8}, {&(0x7f0000002d80)=""/34, 0x22}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/17, 0x11}, {&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/217, 0xd9}, {&(0x7f0000003100)=""/224, 0xe0}], 0xa}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003340)=""/224, 0xe0}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003540), 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x6, 0x100, &(0x7f0000003840)={0x77359400}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x64, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xebe}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40092) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000003b40)={0x7, "3132e8"}, 0x6) semget$private(0x0, 0x0, 0x100) semget$private(0x0, 0x3, 0x280) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000003bc0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40), r2) syz_usb_connect$cdc_ncm(0x4, 0x14b, &(0x7f0000003c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3024c29aa4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9bb, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3f}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x4}, @mdlm_detail={0xbf, 0x24, 0x13, 0xff, "15112f5eaea185af4bb8380874d6f60efa3f71537078ddd4fd4e6cd262e0c0fb4e7a2ecad246dbb8733a32bd2fd74e4f3e01ac3a0b6ac3e9a9c12b6998b29015498ff6cd5269837eb6abfacb0359a145f8d32f04c1c21090820d693446a3fc9f59c0bc1aaef4dd3684de907d3219998b8e03a84894157f88f8274d36bdf0cb92a6381722530dc9a414976ea55ea4a8747b15d399c94831c6318a15d6a9f88e73e72b2699ea2f0bd44dbb821ac68db73a880a9510f7f6c637b25de9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0xb2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0xf7, 0x48}}}}}}}]}}, &(0x7f0000003fc0)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x200, 0x6, 0x8, 0xfd, 0x40, 0x1}, 0x8, &(0x7f0000003e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x471}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x860}}, {0xae, &(0x7f0000003f00)=@string={0xae, 0x3, "d2bab436dda8f22bb350c693ed841c82f13b7b1940b8c39ff378a468568852b8b705f9d65c8d30733fef616e9531b682d31c33be47b745bda48686d346c89e8a8aeb83c548687d95dfc3f12a761743e578a0683b02592b067195b8b6c2dffc37ed12f5a12361de47a6dfb13d95ca84edba798a9bb09c2ca70e56d5a9b306fbc23697ecf69a331817893fcc89c295e6b93bf406ed0aacac99539ff6ec3dc5c0f40c9bb43754b5e4d967652e37"}}]}) 18:07:20 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:07:20 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:20 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:07:20 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1043000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup.cpu/syz1\x00'}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@fsname={'fsname', 0x3d, '/^[+(&@\xe1}(\']\\{:++'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x800, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000055c0)=0x14) 18:07:20 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0312000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x40800) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x40a00) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240a0080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f80000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000580)={0x53, 0xb96b, 0x8, {0xff, 0x3}, {0x1, 0x2}, @const={0xe3, {0x8000, 0x1, 0x3f}}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000085}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x0, 0xf2e3cd94c25fea82, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0xc812) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) 18:07:20 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}}, 0x20000880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:20 executing program 2: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000003600)={0x2, 0x0, @remote}, &(0x7f0000003640)=0x10) 18:07:20 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x0, 0x20) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x44}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40840}, 0x20000880) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x220040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x6a, 0x0, &(0x7f00000002c0)="bee7ffb4d4ba8cda393a0cb194ce006802442d5bfce9802d9c11ec0b5e1667bd5b079a6716f4ff4418fbd6716e6220fff74573fa3d670eee2f5dd5c67795107dca9ee84aa92283ecded763430d435494e96e4f7a46daf291324c1547e57f11c3c705d78f8e627e610797"}) r4 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000380)={r4}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r4, 0x0, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xbb, 0x0, &(0x7f0000000640)="bbb58ecaf7a768cb8135b1812f722a85a45ba9c35c9dc8932ce95ce4d9deb867b77b938a1f714e6d03df6300006a411c8df5e55f30c52bb783d52fa84cb51dc73d6879b7407ecc041be97f8dc71ca69a8596635c81ea19b11a88c3e92aaa9edf564fb851fce9cc351d9c961ce23d4870a24cc5d7f8cd758b2df9c785e6eae585965add57794ecd1a7798db5cdd8a9a26e18f9a24cc8d1a51e5a81dca5de426a472f5d3b503ca84d75c1254d4a037c9a1c05e928ce09cc28bd5a64f"}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000740)) socket$packet(0x11, 0x3, 0x300) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r2) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5f8, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc29b, 0x81, 0xf8, 0xffff}, {0xffff, 0x6, 0x81, 0x7}, {0x6, 0x9, 0x1, 0x9}, {0x4, 0xff, 0xb0, 0x20e2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x1, 0xba}, {0x84, 0xff, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa00000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf800, 0x5, 0x7, 0x2}, {0x800, 0xf9, 0x1f, 0x5aa}, {0x6, 0x4, 0x3, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x8000, 0x81, 0x2, 0x2}, {0x2, 0xac, 0x5, 0xc639}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x25ea}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) VM DIAGNOSIS: 18:07:12 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800e8b0a68 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000000 RDI=ffffed1001d16168 RBP=00000000000000e8 RSP=ffff88803f5ef758 R8 =0000000000000003 R9 =0000000000000005 R10=ffffed1001d1614d R11=0000000000000000 R12=ffff88800e8b0a68 R13=0000000000092800 R14=ffff88800904b780 R15=0000000000092800 RIP=ffffffff84ceea82 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbae34ae540 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bdf67a72b0 CR3=00000000416cf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10016e3046 R10=0000000000000020 R11=6572617764726148 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555615e2400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5ca81d93a4 CR3=000000003e09f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000