Warning: Permanently added '[localhost]:39364' (ECDSA) to the list of known hosts. 2026/01/16 21:04:24 fuzzer started 2026/01/16 21:04:25 dialing manager at localhost:42157 syzkaller login: [ 51.152112] cgroup: Unknown subsys name 'net' [ 51.217844] cgroup: Unknown subsys name 'cpuset' [ 51.232453] cgroup: Unknown subsys name 'rlimit' 2026/01/16 21:04:36 syscalls: 203 2026/01/16 21:04:36 code coverage: enabled 2026/01/16 21:04:36 comparison tracing: enabled 2026/01/16 21:04:36 extra coverage: enabled 2026/01/16 21:04:36 setuid sandbox: enabled 2026/01/16 21:04:36 namespace sandbox: enabled 2026/01/16 21:04:36 Android sandbox: enabled 2026/01/16 21:04:36 fault injection: enabled 2026/01/16 21:04:36 leak checking: enabled 2026/01/16 21:04:36 net packet injection: enabled 2026/01/16 21:04:36 net device setup: enabled 2026/01/16 21:04:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 21:04:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 21:04:36 USB emulation: enabled 2026/01/16 21:04:36 hci packet injection: enabled 2026/01/16 21:04:36 wifi device emulation: enabled 2026/01/16 21:04:36 802.15.4 emulation: enabled 2026/01/16 21:04:36 fetching corpus: 0, signal 0/0 (executing program) 2026/01/16 21:04:37 starting 8 fuzzer processes 21:04:37 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040084}, 0x4100) 21:04:37 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x3, 0x80000, 0x780) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001100)={@private=0xa010101, @loopback}, 0x8) add_key$fscrypt_provisioning(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, &(0x7f00000011c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/226}) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:04:37 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000005c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000640)=0x4) 21:04:37 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) r6 = accept4$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10, 0x1800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000880)="89e52ce97db41675ed8dff44305481c7aeea35c97c68d918be3b32dc93d35f5e6a12c57fd4bd7a31add99a57e5974e07d0d653a15fbbe8ee433eb38c8120caa99614103df5fe3bb2c36418e3e6fc2f1871c6ebd524fd130bec872e18e7a12e9b7e298613fb9951b9e9a644a83afcda5be15b8df02a7710c0ef4f881f3e6fadf693a9daea992c3c5859dcc8c6d4c8262909bfcbdc0a895dd4f7f9475ea0825a220efd2a3f815095e8fe5c8d446169544f7ebd59d15a7f88537350cbb6395e0ff9f12963d58dbbe12a59a7ac0659e85658d656cbf4ce28f8b52048515b9b5065dbc217bbc60e6e3405e19b", 0xea) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000009c0)=r7, 0x1) 21:04:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000440)=r8, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/114}) [ 61.948811] audit: type=1400 audit(1768597477.357:7): avc: denied { execmem } for pid=274 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:04:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 21:04:37 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x80000}) 21:04:37 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) r4 = accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x8, 0x9, 0xf15, 0x10001, 0x40]}, &(0x7f0000001280)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000012c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x4, 0x8, 0x5, 0x5]}, &(0x7f0000001340)=0x78) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001380)={0xfffffffc, {{0x2, 0x4e21, @broadcast}}}, 0x88) [ 63.043867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.046197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.048016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.051374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.053432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.118535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.120551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.122203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.123831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.127351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.128607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.134430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.137939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.142817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.146325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.166345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.171781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.173476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.179255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.184779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.241511] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.246294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.255579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.258308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.259690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.260811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.261663] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.262999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.266556] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.271304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.275628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.276687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.296731] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.303570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.304989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.305280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.306658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.307418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.346585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.348358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.075629] Bluetooth: hci0: command tx timeout [ 65.203403] Bluetooth: hci3: command tx timeout [ 65.204278] Bluetooth: hci2: command tx timeout [ 65.204752] Bluetooth: hci1: command tx timeout [ 65.331154] Bluetooth: hci5: command tx timeout [ 65.395172] Bluetooth: hci4: command tx timeout [ 65.396658] Bluetooth: hci6: command tx timeout [ 65.523198] Bluetooth: hci7: command tx timeout [ 67.123617] Bluetooth: hci0: command tx timeout [ 67.251141] Bluetooth: hci1: command tx timeout [ 67.251584] Bluetooth: hci2: command tx timeout [ 67.251976] Bluetooth: hci3: command tx timeout [ 67.379854] Bluetooth: hci5: command tx timeout [ 67.443271] Bluetooth: hci6: command tx timeout [ 67.443736] Bluetooth: hci4: command tx timeout [ 67.571268] Bluetooth: hci7: command tx timeout [ 69.172065] Bluetooth: hci0: command tx timeout [ 69.299859] Bluetooth: hci3: command tx timeout [ 69.300077] Bluetooth: hci2: command tx timeout [ 69.300322] Bluetooth: hci1: command tx timeout [ 69.428016] Bluetooth: hci5: command tx timeout [ 69.491176] Bluetooth: hci6: command tx timeout [ 69.491602] Bluetooth: hci4: command tx timeout [ 69.620140] Bluetooth: hci7: command tx timeout [ 71.219253] Bluetooth: hci0: command tx timeout [ 71.347154] Bluetooth: hci2: command tx timeout [ 71.347628] Bluetooth: hci3: command tx timeout [ 71.347997] Bluetooth: hci1: command tx timeout [ 71.475217] Bluetooth: hci5: command tx timeout [ 71.540111] Bluetooth: hci4: command tx timeout [ 71.540315] Bluetooth: hci6: command tx timeout [ 71.667135] Bluetooth: hci7: command tx timeout [ 101.467149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.467835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.557247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.557861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.792450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.793115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.843923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.844635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.852478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.853146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.987401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.987433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.071389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.072029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000440)=r8, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/114}) [ 102.154979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.155644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000440)=r8, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/114}) 21:05:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) r6 = accept4$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10, 0x1800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000880)="89e52ce97db41675ed8dff44305481c7aeea35c97c68d918be3b32dc93d35f5e6a12c57fd4bd7a31add99a57e5974e07d0d653a15fbbe8ee433eb38c8120caa99614103df5fe3bb2c36418e3e6fc2f1871c6ebd524fd130bec872e18e7a12e9b7e298613fb9951b9e9a644a83afcda5be15b8df02a7710c0ef4f881f3e6fadf693a9daea992c3c5859dcc8c6d4c8262909bfcbdc0a895dd4f7f9475ea0825a220efd2a3f815095e8fe5c8d446169544f7ebd59d15a7f88537350cbb6395e0ff9f12963d58dbbe12a59a7ac0659e85658d656cbf4ce28f8b52048515b9b5065dbc217bbc60e6e3405e19b", 0xea) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000009c0)=r7, 0x1) [ 102.266292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.266889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000440)=r8, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/114}) [ 102.299098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.299711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.379079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.379707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000440)=r8, 0x1) 21:05:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) r6 = accept4$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10, 0x1800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000880)="89e52ce97db41675ed8dff44305481c7aeea35c97c68d918be3b32dc93d35f5e6a12c57fd4bd7a31add99a57e5974e07d0d653a15fbbe8ee433eb38c8120caa99614103df5fe3bb2c36418e3e6fc2f1871c6ebd524fd130bec872e18e7a12e9b7e298613fb9951b9e9a644a83afcda5be15b8df02a7710c0ef4f881f3e6fadf693a9daea992c3c5859dcc8c6d4c8262909bfcbdc0a895dd4f7f9475ea0825a220efd2a3f815095e8fe5c8d446169544f7ebd59d15a7f88537350cbb6395e0ff9f12963d58dbbe12a59a7ac0659e85658d656cbf4ce28f8b52048515b9b5065dbc217bbc60e6e3405e19b", 0xea) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000009c0)=r7, 0x1) 21:05:17 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x3, 0x80000, 0x780) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001100)={@private=0xa010101, @loopback}, 0x8) add_key$fscrypt_provisioning(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, &(0x7f00000011c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/226}) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:05:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000440), 0x1) [ 102.562445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.563096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.590101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.591255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.595178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.702252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.702882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.751271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.756022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.786086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.787206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) r6 = memfd_secret(0x80000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:05:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) r6 = accept4$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10, 0x1800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000880)="89e52ce97db41675ed8dff44305481c7aeea35c97c68d918be3b32dc93d35f5e6a12c57fd4bd7a31add99a57e5974e07d0d653a15fbbe8ee433eb38c8120caa99614103df5fe3bb2c36418e3e6fc2f1871c6ebd524fd130bec872e18e7a12e9b7e298613fb9951b9e9a644a83afcda5be15b8df02a7710c0ef4f881f3e6fadf693a9daea992c3c5859dcc8c6d4c8262909bfcbdc0a895dd4f7f9475ea0825a220efd2a3f815095e8fe5c8d446169544f7ebd59d15a7f88537350cbb6395e0ff9f12963d58dbbe12a59a7ac0659e85658d656cbf4ce28f8b52048515b9b5065dbc217bbc60e6e3405e19b", 0xea) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000009c0)=r7, 0x1) 21:05:31 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x3, 0x80000, 0x780) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001100)={@private=0xa010101, @loopback}, 0x8) add_key$fscrypt_provisioning(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, &(0x7f00000011c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/226}) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:05:31 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000005c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000640)=0x4) 21:05:31 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x80000}) 21:05:31 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) r4 = accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x8, 0x9, 0xf15, 0x10001, 0x40]}, &(0x7f0000001280)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000012c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x4, 0x8, 0x5, 0x5]}, &(0x7f0000001340)=0x78) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001380)={0xfffffffc, {{0x2, 0x4e21, @broadcast}}}, 0x88) 21:05:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 21:05:31 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040084}, 0x4100) 21:05:31 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) r4 = accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x8, 0x9, 0xf15, 0x10001, 0x40]}, &(0x7f0000001280)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000012c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x4, 0x8, 0x5, 0x5]}, &(0x7f0000001340)=0x78) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001380)={0xfffffffc, {{0x2, 0x4e21, @broadcast}}}, 0x88) 21:05:31 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000005c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000640)=0x4) 21:05:31 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) r4 = accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x8, 0x9, 0xf15, 0x10001, 0x40]}, &(0x7f0000001280)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000012c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x4, 0x8, 0x5, 0x5]}, &(0x7f0000001340)=0x78) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001380)={0xfffffffc, {{0x2, 0x4e21, @broadcast}}}, 0x88) 21:05:39 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000005c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000640)=0x4) 21:05:39 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x80000}) 21:05:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:05:39 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040084}, 0x4100) 21:05:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 21:05:39 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x3, 0x80000, 0x780) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001100)={@private=0xa010101, @loopback}, 0x8) add_key$fscrypt_provisioning(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, &(0x7f00000011c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/226}) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:05:39 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) r6 = accept4$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10, 0x1800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000880)="89e52ce97db41675ed8dff44305481c7aeea35c97c68d918be3b32dc93d35f5e6a12c57fd4bd7a31add99a57e5974e07d0d653a15fbbe8ee433eb38c8120caa99614103df5fe3bb2c36418e3e6fc2f1871c6ebd524fd130bec872e18e7a12e9b7e298613fb9951b9e9a644a83afcda5be15b8df02a7710c0ef4f881f3e6fadf693a9daea992c3c5859dcc8c6d4c8262909bfcbdc0a895dd4f7f9475ea0825a220efd2a3f815095e8fe5c8d446169544f7ebd59d15a7f88537350cbb6395e0ff9f12963d58dbbe12a59a7ac0659e85658d656cbf4ce28f8b52048515b9b5065dbc217bbc60e6e3405e19b", 0xea) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:05:39 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) r4 = accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x8, 0x9, 0xf15, 0x10001, 0x40]}, &(0x7f0000001280)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000012c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x4, 0x8, 0x5, 0x5]}, &(0x7f0000001340)=0x78) 21:05:39 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000005c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:39 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:39 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x8, 0x9, 0xf15, 0x10001, 0x40]}, &(0x7f0000001280)=0x78) 21:05:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) r5 = memfd_secret(0x80000) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:05:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 21:05:39 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x18000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:39 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @private}, &(0x7f00000011c0)=0x10, 0x80800) 21:05:39 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x80000}) 21:05:39 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/86}) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:47 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) 21:05:47 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040084}, 0x4100) 21:05:47 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) accept4$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10, 0x1800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:05:47 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) 21:05:47 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x3, 0x80000, 0x780) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001100)={@private=0xa010101, @loopback}, 0x8) add_key$fscrypt_provisioning(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, &(0x7f00000011c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:05:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:05:47 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000440)) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 21:05:47 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x29, 0x1, 0x5, 0xfffffffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x8000, 0x1, 0x4}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:47 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x3, 0x46a, [0x0, 0x20000c00, 0x20000ea4, 0x20000ed4], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x5, 0x8847, 'tunl0\x00', 'veth0\x00', 'wlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0x8}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x7f, {0x4}}}}], @common=@STANDARD={'\x00', 0x8}}, {0x18, 0x10, 0xf5, 'wlan0\x00', 'wg0\x00', 'macvtap0\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="989a3b5a7297", 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xe182, 0x1, 0x0, "134bfb9850b4934a435f7bda68961d0b05b3cf7cbff8f1f5a19a60bd05a62ed3bd38664281ef89971bc464a58568856f031d4f1a0744d2ff566f88885b4ef466"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5, 0x2b0f1448bed847bc, 'syzkaller0\x00', 'veth0_macvtap\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0xff, 0x914ca5a63e9ed9b8, 0xff, 0x0, 0xff], @random="caf4ecee0dfe", [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x400, 0x2, 0x0, 0x0, "7217358036050c21308c099d56b5d1672a2d6d321e0c314325ff65908c457206bedb23b5da0343c82ee1f499c1c3b602d62056d108b3a12878bb9fd965e6bf9f"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x7}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}]}, 0x4e2) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:05:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) r4 = syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[r0, r0, r4]}, 0x3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:05:47 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000780)={{0x87, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x28, 0x7, 0xc}, {@broadcast, 0x4e23, 0x0, 0x2, 0x6b6a, 0x9}}, 0x44) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:05:47 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:47 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000b80)={0x9, 0x0, &(0x7f0000000b40)}, 0x0) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:05:47 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) 21:05:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) 21:05:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000640)=""/94) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) 21:05:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) syz_open_procfs$userns(r3, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:05:55 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) 21:05:55 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x420881, 0x0) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:05:55 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) 21:05:55 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x90000, 0x0, 0x50bf, 0x40, 0xc, "76b66c3b954ace98933692fad39416aa3cacd0"}) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:05:55 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x3, 0x80000, 0x780) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001100)={@private=0xa010101, @loopback}, 0x8) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:05:55 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000740)=0x6, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:06:03 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@private2, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee00}, {0x101, 0x9, 0x1, 0x2, 0xfffffffffffffff9, 0x1, 0x9}, {0x490, 0xc48b, 0xffffffff}, 0x6, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3503, 0x2, 0x0, 0x0, 0x3f, 0xc0000, 0x9}}, 0xe8) 21:06:03 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socket(0x3, 0x80000, 0x780) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:06:03 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:06:03 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) 21:06:03 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000a40)='wg2\x00', 0x10000, 0x6, 0x4}) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:06:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:06:03 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) socket(0x22, 0x3, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:06:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044085) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) 21:06:03 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x424601, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:06:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x80}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:06:03 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000009c0)={{0xc, @broadcast, 0x4e24, 0x3, 'dh\x00', 0x0, 0x4, 0x5f}, {@remote, 0x4e20, 0x4, 0x5, 0x6, 0x6}}, 0x44) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:06:03 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:06:03 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x28}, 0xff, 0xff, 0x4, 0x7, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x40, 0x2, 0x0, 0xffff, 0xfeff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8000, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0xfffc, 0x200, 0x120, 0x28, 0xfff8, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="700e732e9a5f", @rand_addr=0x64010102, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:06:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) 21:06:03 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000240)) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:06:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) [ 148.287876] [ 148.288112] ===================================== [ 148.288583] WARNING: bad unlock balance detected! [ 148.289016] 6.19.0-rc5-next-20260116 #1 Not tainted [ 148.289496] ------------------------------------- [ 148.289955] syz-executor.4/4231 is trying to release lock (rcu_read_lock) at: [ 148.290918] [] __wait_on_freeing_inode+0x105/0x350 [ 148.291847] but there are no more locks to release! [ 148.292601] [ 148.292601] other info that might help us debug this: [ 148.293602] 4 locks held by syz-executor.4/4231: [ 148.294276] #0: ffff88800fba83f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 148.295476] #1: ffff88802f8916f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 148.296821] #2: ffff88800fbac950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 148.298001] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 148.299318] [ 148.299318] stack backtrace: [ 148.300282] CPU: 1 UID: 0 PID: 4231 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 148.300297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.300304] Call Trace: [ 148.300310] [ 148.300315] dump_stack_lvl+0xca/0x120 [ 148.300346] ? __wait_on_freeing_inode+0x105/0x350 [ 148.300360] print_unlock_imbalance_bug+0x118/0x130 [ 148.300376] ? __wait_on_freeing_inode+0x105/0x350 [ 148.300390] lock_release+0x1ee/0x270 [ 148.300406] __wait_on_freeing_inode+0x10a/0x350 [ 148.300421] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 148.300437] ? __pfx_var_wake_function+0x10/0x10 [ 148.300454] ? lock_is_held_type+0x9e/0x120 [ 148.300466] insert_inode_locked+0x25f/0x890 [ 148.300484] __ext4_new_inode+0x223d/0x4cd0 [ 148.300501] ? __pfx___ext4_new_inode+0x10/0x10 [ 148.300515] ? __pfx___dquot_initialize+0x10/0x10 [ 148.300535] ? __pfx_avc_has_perm+0x10/0x10 [ 148.300551] ext4_symlink+0x623/0xb40 [ 148.300571] ? __pfx_ext4_symlink+0x10/0x10 [ 148.300587] ? security_inode_permission+0x72/0xe0 [ 148.300600] vfs_symlink+0x44b/0x840 [ 148.300617] filename_symlinkat+0x158/0x440 [ 148.300632] ? __pfx_filename_symlinkat+0x10/0x10 [ 148.300646] ? strncpy_from_user+0x21b/0x2f0 [ 148.300663] __x64_sys_symlink+0x82/0x110 [ 148.300677] do_syscall_64+0xbf/0x420 [ 148.300690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.300703] RIP: 0033:0x7fe6ff142427 [ 148.300713] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.300724] RSP: 002b:00007ffdfaec5878 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 148.300735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6ff142427 [ 148.300743] RDX: 00007ffdfaec5953 RSI: 00007fe6ff19d022 RDI: 00007ffdfaec5940 [ 148.300750] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdfaec5710 [ 148.300757] R10: 00007ffdfaec55c7 R11: 0000000000000206 R12: 0000000000000001 [ 148.300765] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdfaec5940 [ 148.300775] [ 148.320390] ------------[ cut here ]------------ [ 148.320817] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/4231 [ 148.322573] Modules linked in: [ 148.322909] CPU: 1 UID: 0 PID: 4231 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 148.323882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.324667] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 148.325243] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 148.326912] RSP: 0018:ffff88803f1bf9a0 EFLAGS: 00010286 [ 148.327440] RAX: 00000000ffffffff RBX: ffff888046aa9b80 RCX: ffffffff815660f7 [ 148.328129] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888046aa9f7c [ 148.328764] RBP: ffff888046aa9b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 148.329469] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046aa9b80 [ 148.330152] R13: 0000000000000001 R14: ffffffff85c101c0 R15: ffff88802f903c48 [ 148.330784] FS: 000055557ef00400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 148.331551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.332128] CR2: 0000555583585c58 CR3: 000000000d316000 CR4: 0000000000350ef0 [ 148.332764] Call Trace: [ 148.333032] [ 148.333797] __wait_on_freeing_inode+0x10f/0x350 [ 148.334582] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 148.335762] ? __pfx_var_wake_function+0x10/0x10 [ 148.337154] ? lock_is_held_type+0x9e/0x120 [ 148.338357] insert_inode_locked+0x25f/0x890 [ 148.340153] __ext4_new_inode+0x223d/0x4cd0 [ 148.342760] ? __pfx___ext4_new_inode+0x10/0x10 [ 148.344138] ? __pfx___dquot_initialize+0x10/0x10 [ 148.344943] ? __pfx_avc_has_perm+0x10/0x10 [ 148.346897] ext4_symlink+0x623/0xb40 [ 148.349347] ? __pfx_ext4_symlink+0x10/0x10 [ 148.350409] ? security_inode_permission+0x72/0xe0 [ 148.352084] vfs_symlink+0x44b/0x840 [ 148.353431] filename_symlinkat+0x158/0x440 [ 148.354601] ? __pfx_filename_symlinkat+0x10/0x10 [ 148.355427] ? strncpy_from_user+0x21b/0x2f0 [ 148.357360] __x64_sys_symlink+0x82/0x110 [ 148.358163] do_syscall_64+0xbf/0x420 [ 148.358964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.359569] RIP: 0033:0x7fe6ff142427 [ 148.359967] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.361707] RSP: 002b:00007ffdfaec5878 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 148.362437] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6ff142427 [ 148.363134] RDX: 00007ffdfaec5953 RSI: 00007fe6ff19d022 RDI: 00007ffdfaec5940 [ 148.363770] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdfaec5710 [ 148.364461] R10: 00007ffdfaec55c7 R11: 0000000000000206 R12: 0000000000000001 [ 148.365153] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdfaec5940 [ 148.367895] [ 148.368161] irq event stamp: 699 [ 148.368464] hardirqs last enabled at (699): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 148.369424] hardirqs last disabled at (698): [] _raw_spin_lock_irqsave+0x53/0x60 [ 148.370345] softirqs last enabled at (694): [] kernel_fpu_end+0x59/0x70 [ 148.371195] softirqs last disabled at (692): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 148.372121] ---[ end trace 0000000000000000 ]--- 21:06:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) 21:06:11 executing program 6: r0 = fork() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = epoll_create(0x21) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000040)=[r2, r1, r3, r1, r4, r1, r1, r1, r1, r1]}, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) io_uring_enter(0xffffffffffffffff, 0x7955, 0xf4b4, 0x2, &(0x7f0000000100)={[0x1000]}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r6 = getpid() ptrace$getregs(0xc, r6, 0x7, &(0x7f00000001c0)=""/4096) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000001200)="8302e4fcb173123ef8dd7535139116ef45dbe1f013812928fec9860d5ae8b2ab3fb0f5e0f9f8e45d558dc782eacb660480e2166e39332ab8bb534e75247c8c0731fccb1deed8c60a33de540a407b22c89298d0b28991d35a91831c31a0314b3bd58d509c8b018c419864a31723f7ac8834a2ce2479860e0934e120f4c0f3150c19e7c70ff6b19a24c7891cee19fa480480c68e4efa2f1478101b10b84b3b") ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000012c0)) ptrace$peekuser(0x3, r6, 0x8b) sendmsg$FOU_CMD_GET(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xca}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20080000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x80000}) 21:06:11 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x5, 0x28, [0x0, 0x7728, 0xc0000000000, 0xde5, 0x37b, 0x100000001], 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000b80)=""/40}, &(0x7f0000000c40)=0x78) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:06:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:06:11 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:06:11 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:06:11 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x24ac42, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:06:11 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) 21:06:11 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:06:11 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:06:11 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x141080, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x81, 0x5, 0x8000, 0x3ff, 0x7, "540d1a85d50dc4bc700460bddc727f3179e244"}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/225) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 21:06:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/185}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x345341, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) io_uring_setup(0x64e8, &(0x7f0000000180)={0x0, 0xda2d, 0x8, 0x0, 0x6}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) 21:06:11 executing program 7: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7ff, 0x4, 0x80000000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0xc, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x0, 0x29538c6d, 0x45}, {@loopback, 0x4e21, 0x1, 0x2, 0x0, 0x4fa}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x64}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x2f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x1b, 0x0, 0x34}, {@multicast1, 0x4e21, 0x1, 0x2, 0x8, 0x2}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0xb2, [0x8, 0x6, 0x795, 0x7, 0x3, 0x80000000], 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=""/178}, &(0x7f00000008c0)=0x78) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote, @local}, &(0x7f0000000980)=0xc) accept4$inet(r2, &(0x7f0000001100)={0x2, 0x0, @multicast1}, &(0x7f0000001140)=0x10, 0x80800) 21:06:11 executing program 1: socketpair(0xe, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x63, [0x4, 0x3, 0x8000000000000, 0x400, 0x45395de5, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/99}, &(0x7f00000001c0)=0x78) syz_io_uring_setup(0x27de, &(0x7f0000000200)={0x0, 0xefdc, 0x10, 0x3, 0x34b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = memfd_secret(0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x4, 0x2, 0x1, 0x3f]}, &(0x7f0000000380)=0x78) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0xfc00, 0x4e24, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xee00}, {0x3, 0x6, 0xdf, 0x5, 0x2, 0x9, 0xfffffffffffffff9, 0x2}, {0x4, 0x4, 0x1, 0x5}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x3, 0x2, 0x81, 0xeb6, 0x1}}, 0xe8) sendmsg$802154_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)="a5f8b455d554083efd66ce1b4aeadc00534ee9a442e5fa51ec860855fb69f55e9a059f048f9d68bbf8f2eda134f13e5d1e704ed0627ded7e1ae42b8a5e735f3f6132d279172a88b0969f9672c726e0bf19dbbff20daf30e11edc086d75f3e3ab3faea7daab2789a86c43ce9e1ab8165f5ff3700084f2db0c604dbce00605902aec3e39b6973c5a1559ae050d2b1bda56a5d543690ba723828762ccab2c2593a52f722750af9664d7616c66941a85d116b97392b26eb9e4cd36374e0f0a1d046ba83f4c682d56aba380c0", 0xca}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) r3 = accept4$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)={0xe5c, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x290) r4 = socket$inet(0x2, 0x800, 0xfffff000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x4, 0x5c, [0x3, 0x6, 0x80000000, 0x7f91, 0x5, 0x69d3], 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f00000009c0)=""/92}, &(0x7f0000000ac0)=0x78) getpeername$inet(r2, &(0x7f0000001380)={0x2, 0x0, @initdev}, &(0x7f00000013c0)=0x10) 21:06:11 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000081) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x800) 21:06:11 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x401, 0x8, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc000, 0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x812, 0x1, 0x3, 0x13b}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x4da3, 0x69c7, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r0, 0x10000000) socketpair(0x6, 0x3, 0x1f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000640)={0x2b, @local, 0x4e22, 0x2, 'wlc\x00', 0x12, 0x85be, 0x2a}, 0x2c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 21:06:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x40) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x88) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x3) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000180)=0x4) ioctl$TIOCCONS(r3, 0x541d) r4 = memfd_secret(0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x4, 0x11, "6bb51e50c90e8846f5e4d534505d63b19fd76f"}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/228}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x448c1, 0x0) VM DIAGNOSIS: 21:06:03 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801c00fb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003801f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801c00fb78 RIP=ffffffff84d1a2d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555616fb400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff45912e48 CR3=000000000a471000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10016e9046 R10=0000000000000078 R11=74735f706d756420 R12=0000000000000078 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557ef00400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555583585c58 CR3=000000000d316000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000