Warning: Permanently added '[localhost]:11942' (ECDSA) to the list of known hosts. 2022/10/02 10:25:26 fuzzer started 2022/10/02 10:25:26 dialing manager at localhost:35095 syzkaller login: [ 36.105231] cgroup: Unknown subsys name 'net' [ 36.212934] cgroup: Unknown subsys name 'rlimit' 2022/10/02 10:25:41 syscalls: 207 2022/10/02 10:25:41 code coverage: enabled 2022/10/02 10:25:41 comparison tracing: enabled 2022/10/02 10:25:41 extra coverage: enabled 2022/10/02 10:25:41 setuid sandbox: enabled 2022/10/02 10:25:41 namespace sandbox: enabled 2022/10/02 10:25:41 Android sandbox: enabled 2022/10/02 10:25:41 fault injection: enabled 2022/10/02 10:25:41 leak checking: enabled 2022/10/02 10:25:41 net packet injection: enabled 2022/10/02 10:25:41 net device setup: enabled 2022/10/02 10:25:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 10:25:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 10:25:41 USB emulation: enabled 2022/10/02 10:25:41 hci packet injection: enabled 2022/10/02 10:25:41 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 10:25:41 802.15.4 emulation: enabled 2022/10/02 10:25:41 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 10:25:42 starting 8 fuzzer processes 10:25:42 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x19c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ae209a12d279263a7f17d1a16a366c0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cc92c57a954f79229411c7afda53de1366bc7a3d713664f1c52db946c3c4d22"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "195e1565eb9258714d0e84a38eedc398"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f541b37e39fefd328cd1f9c84341356e"}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r7) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fbc7fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7305}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c66c60e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x82bdcba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73cf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b08a96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b6d2bfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cbb9c38}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dcdd9f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cbadcf3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10:25:42 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000f80)) r4 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) io_cancel(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0xe2a, r4, &(0x7f0000001000)="1da3a20d82e56fc14177b6b05cbc6d711f7a1aa337ce05dd5694f63079716f5d1166c5b61c43372063fc2e190d910edf94b294e8c29e6cdacbfa13db074fbc0f99b1d5e7697f9194945e38d57ef1088805e396d4efa2149ddaa230ebea17acb82bc0c89f062c234f73ca12ece5478ad5e4f37a838111e621a2fb2d76005ffe941da43536aca3d4e5eb516b6c7090fb809c84788963d183689dc25bd84de77dcc48bc851bbb73edb228", 0xa9, 0x9, 0x0, 0x2}, &(0x7f0000001140)) 10:25:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:25:42 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r4}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r7, r0, r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r9, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r3, 0x2, 0x7, 0x3, 0x2c6, 0x2c, @loopback, @local, 0x700, 0x1, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2a4, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "110083b2c8f0755d99efee6033204b14224f7fd1c844f0670e3024ad5e6a1c1ec310d90218c21fc4abccb77198ff32d863c23f130c1ae43dab85922b8498f60328d053c5a6f9ebf6344337e103083eaf2c07e8b40b7b916d4e82938c42455ebef2cd9918283c9ed64dbb92bcd01b754dabea2566b80f9b86f08aae8dc84bed5446fe1c029310b6"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'version=9p2000.L'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.+!{\'\xea/%@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&{[].\xbf\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'subj_type'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'wfdno'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000045) clock_getres(0x6, &(0x7f0000000c40)) setregid(r6, 0x0) [ 51.119502] audit: type=1400 audit(1664706342.271:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:25:42 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000680), 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4) 10:25:42 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) r4 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb52, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, 0x40}}, 0x8000) 10:25:42 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) getsockname(r4, &(0x7f0000001000)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @bcast, @rose, @netrom, @null, @null, @null]}, &(0x7f0000001080)=0x80) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:25:42 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x6, 0x0, 0x50, 0x109, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, 0x7, 0x8, 0x10001, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x4, 0xe0, 0x0, 0xfff, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfb, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r1, 0x0, 0x4, 0x20, 0x9a, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8, 0x5, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', r1, 0x29, 0x9, 0x1f, 0xffff, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8, 0x7, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r1, 0x4, 0x50, 0x8, 0x7, 0x42, @private0, @loopback, 0x80, 0x700, 0x1, 0xab7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x2f, 0x1, 0x7, 0x1, 0x64, @local, @local, 0x88, 0x7, 0x4, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', r0, 0x2f, 0x1, 0x8, 0x6d, 0x61, @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8, 0x8000, 0x8, 0xffff305a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r1, 0x2f, 0xe5, 0x9, 0x4, 0x20, @local, @local, 0x7, 0x7800, 0x8, 0xd98}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000840)={0x8dc, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r0}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x2, 0xe0, 0x3}, {0x3, 0x0, 0x80, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d3dde2b}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r2}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r0}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r5}, {0x190, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x40, 0x8, 0x9}, {0x2d, 0x1, 0x2, 0x6cc5}, {0x0, 0x3, 0x80, 0x100}, {0x4, 0x48, 0x5c, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe61}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x24040084}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001440)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xcb, 0x5, 0x30, @local, @mcast2, 0x40, 0x700, 0x7, 0x7a4a}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001500)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000001600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000016c0)={'ip6_vti0\x00', &(0x7f0000001640)={'sit0\x00', r5, 0x11, 0x40, 0x1, 0x7, 0x30, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x40, 0x40, 0x400, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001700)={0x358, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r13}, {0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r14}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x20010810}, 0x8040) [ 52.467527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.469106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.478400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.480261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.481957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.483049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.484097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.486942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 52.488456] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.489571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.491006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.491992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.493116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.494177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 52.495383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.496373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.512555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 52.515361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.516973] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 52.523304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.524542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.526174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.528084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.530292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.532081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 52.533662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.535052] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.536270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.539852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.541124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.542397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.544010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.545229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.546552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 52.547766] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.550732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.552390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 52.556218] Bluetooth: hci2: HCI_REQ-0x0c1a [ 52.560592] Bluetooth: hci1: HCI_REQ-0x0c1a [ 52.561815] Bluetooth: hci3: HCI_REQ-0x0c1a [ 52.562999] Bluetooth: hci4: HCI_REQ-0x0c1a [ 52.566554] Bluetooth: hci5: HCI_REQ-0x0c1a [ 52.572868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 52.574229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 52.577057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 52.579149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 52.580998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 52.583643] Bluetooth: hci0: HCI_REQ-0x0c1a [ 52.584481] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 52.585299] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 52.609169] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 52.613942] Bluetooth: hci7: HCI_REQ-0x0c1a [ 52.631913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 52.637413] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 52.638828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 52.643647] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.597146] Bluetooth: hci5: command 0x0409 tx timeout [ 54.598146] Bluetooth: hci3: command 0x0409 tx timeout [ 54.660834] Bluetooth: hci1: command 0x0409 tx timeout [ 54.661608] Bluetooth: hci6: command 0x0409 tx timeout [ 54.662341] Bluetooth: hci7: command 0x0409 tx timeout [ 54.663071] Bluetooth: hci0: command 0x0409 tx timeout [ 54.663808] Bluetooth: hci4: command 0x0409 tx timeout [ 54.664491] Bluetooth: hci2: command 0x0409 tx timeout [ 56.646182] Bluetooth: hci3: command 0x041b tx timeout [ 56.646658] Bluetooth: hci5: command 0x041b tx timeout [ 56.710007] Bluetooth: hci2: command 0x041b tx timeout [ 56.710483] Bluetooth: hci4: command 0x041b tx timeout [ 56.710962] Bluetooth: hci0: command 0x041b tx timeout [ 56.711383] Bluetooth: hci7: command 0x041b tx timeout [ 56.711814] Bluetooth: hci6: command 0x041b tx timeout [ 56.712222] Bluetooth: hci1: command 0x041b tx timeout [ 58.692749] Bluetooth: hci5: command 0x040f tx timeout [ 58.693213] Bluetooth: hci3: command 0x040f tx timeout [ 58.756775] Bluetooth: hci1: command 0x040f tx timeout [ 58.757271] Bluetooth: hci6: command 0x040f tx timeout [ 58.757632] Bluetooth: hci7: command 0x040f tx timeout [ 58.758081] Bluetooth: hci0: command 0x040f tx timeout [ 58.758484] Bluetooth: hci4: command 0x040f tx timeout [ 58.758902] Bluetooth: hci2: command 0x040f tx timeout [ 60.740732] Bluetooth: hci3: command 0x0419 tx timeout [ 60.741214] Bluetooth: hci5: command 0x0419 tx timeout [ 60.804824] Bluetooth: hci2: command 0x0419 tx timeout [ 60.805299] Bluetooth: hci4: command 0x0419 tx timeout [ 60.806036] Bluetooth: hci0: command 0x0419 tx timeout [ 60.806424] Bluetooth: hci7: command 0x0419 tx timeout [ 60.806853] Bluetooth: hci6: command 0x0419 tx timeout [ 60.807233] Bluetooth: hci1: command 0x0419 tx timeout 10:26:55 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:26:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x19c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ae209a12d279263a7f17d1a16a366c0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cc92c57a954f79229411c7afda53de1366bc7a3d713664f1c52db946c3c4d22"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "195e1565eb9258714d0e84a38eedc398"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f541b37e39fefd328cd1f9c84341356e"}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r7) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fbc7fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7305}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c66c60e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x82bdcba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73cf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b08a96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b6d2bfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cbb9c38}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dcdd9f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cbadcf3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10:26:55 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) getsockname(r4, &(0x7f0000001000)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @bcast, @rose, @netrom, @null, @null, @null]}, &(0x7f0000001080)=0x80) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:26:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:26:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000680), 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4) 10:26:55 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r4}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r7, r0, r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r9, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r3, 0x2, 0x7, 0x3, 0x2c6, 0x2c, @loopback, @local, 0x700, 0x1, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2a4, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "110083b2c8f0755d99efee6033204b14224f7fd1c844f0670e3024ad5e6a1c1ec310d90218c21fc4abccb77198ff32d863c23f130c1ae43dab85922b8498f60328d053c5a6f9ebf6344337e103083eaf2c07e8b40b7b916d4e82938c42455ebef2cd9918283c9ed64dbb92bcd01b754dabea2566b80f9b86f08aae8dc84bed5446fe1c029310b6"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'version=9p2000.L'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.+!{\'\xea/%@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&{[].\xbf\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'subj_type'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'wfdno'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000045) clock_getres(0x6, &(0x7f0000000c40)) setregid(r6, 0x0) 10:26:55 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) r4 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb52, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, 0x40}}, 0x8000) 10:26:55 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000f80)) r4 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) io_cancel(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0xe2a, r4, &(0x7f0000001000)="1da3a20d82e56fc14177b6b05cbc6d711f7a1aa337ce05dd5694f63079716f5d1166c5b61c43372063fc2e190d910edf94b294e8c29e6cdacbfa13db074fbc0f99b1d5e7697f9194945e38d57ef1088805e396d4efa2149ddaa230ebea17acb82bc0c89f062c234f73ca12ece5478ad5e4f37a838111e621a2fb2d76005ffe941da43536aca3d4e5eb516b6c7090fb809c84788963d183689dc25bd84de77dcc48bc851bbb73edb228", 0xa9, 0x9, 0x0, 0x2}, &(0x7f0000001140)) 10:26:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000680), 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4) 10:26:55 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r4}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r7, r0, r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r9, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r3, 0x2, 0x7, 0x3, 0x2c6, 0x2c, @loopback, @local, 0x700, 0x1, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2a4, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "110083b2c8f0755d99efee6033204b14224f7fd1c844f0670e3024ad5e6a1c1ec310d90218c21fc4abccb77198ff32d863c23f130c1ae43dab85922b8498f60328d053c5a6f9ebf6344337e103083eaf2c07e8b40b7b916d4e82938c42455ebef2cd9918283c9ed64dbb92bcd01b754dabea2566b80f9b86f08aae8dc84bed5446fe1c029310b6"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'version=9p2000.L'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.+!{\'\xea/%@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&{[].\xbf\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'subj_type'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'wfdno'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000045) clock_getres(0x6, &(0x7f0000000c40)) setregid(r6, 0x0) 10:26:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:26:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x19c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ae209a12d279263a7f17d1a16a366c0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cc92c57a954f79229411c7afda53de1366bc7a3d713664f1c52db946c3c4d22"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "195e1565eb9258714d0e84a38eedc398"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f541b37e39fefd328cd1f9c84341356e"}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r7) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fbc7fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7305}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c66c60e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x82bdcba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73cf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b08a96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b6d2bfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cbb9c38}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dcdd9f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cbadcf3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10:27:08 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000680), 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4) 10:27:08 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r4}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r7, r0, r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r9, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r3, 0x2, 0x7, 0x3, 0x2c6, 0x2c, @loopback, @local, 0x700, 0x1, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2a4, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "110083b2c8f0755d99efee6033204b14224f7fd1c844f0670e3024ad5e6a1c1ec310d90218c21fc4abccb77198ff32d863c23f130c1ae43dab85922b8498f60328d053c5a6f9ebf6344337e103083eaf2c07e8b40b7b916d4e82938c42455ebef2cd9918283c9ed64dbb92bcd01b754dabea2566b80f9b86f08aae8dc84bed5446fe1c029310b6"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'version=9p2000.L'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.+!{\'\xea/%@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&{[].\xbf\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'subj_type'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'wfdno'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000045) clock_getres(0x6, &(0x7f0000000c40)) setregid(r6, 0x0) 10:27:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:08 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:08 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000f80)) r4 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) io_cancel(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0xe2a, r4, &(0x7f0000001000)="1da3a20d82e56fc14177b6b05cbc6d711f7a1aa337ce05dd5694f63079716f5d1166c5b61c43372063fc2e190d910edf94b294e8c29e6cdacbfa13db074fbc0f99b1d5e7697f9194945e38d57ef1088805e396d4efa2149ddaa230ebea17acb82bc0c89f062c234f73ca12ece5478ad5e4f37a838111e621a2fb2d76005ffe941da43536aca3d4e5eb516b6c7090fb809c84788963d183689dc25bd84de77dcc48bc851bbb73edb228", 0xa9, 0x9, 0x0, 0x2}, &(0x7f0000001140)) 10:27:08 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) getsockname(r4, &(0x7f0000001000)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @bcast, @rose, @netrom, @null, @null, @null]}, &(0x7f0000001080)=0x80) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:08 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x19c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ae209a12d279263a7f17d1a16a366c0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cc92c57a954f79229411c7afda53de1366bc7a3d713664f1c52db946c3c4d22"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "195e1565eb9258714d0e84a38eedc398"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f541b37e39fefd328cd1f9c84341356e"}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r7) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fbc7fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7305}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c66c60e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x82bdcba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73cf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b08a96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b6d2bfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cbb9c38}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dcdd9f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cbadcf3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10:27:08 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) r4 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb52, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, 0x40}}, 0x8000) 10:27:09 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r4}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r7, r0, r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r9, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r3, 0x2, 0x7, 0x3, 0x2c6, 0x2c, @loopback, @local, 0x700, 0x1, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2a4, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "110083b2c8f0755d99efee6033204b14224f7fd1c844f0670e3024ad5e6a1c1ec310d90218c21fc4abccb77198ff32d863c23f130c1ae43dab85922b8498f60328d053c5a6f9ebf6344337e103083eaf2c07e8b40b7b916d4e82938c42455ebef2cd9918283c9ed64dbb92bcd01b754dabea2566b80f9b86f08aae8dc84bed5446fe1c029310b6"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'version=9p2000.L'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.+!{\'\xea/%@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&{[].\xbf\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ').'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'subj_type'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'wfdno'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000045) setregid(r6, 0x0) 10:27:09 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000680), 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:27:09 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000f80)) r4 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) io_cancel(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0xe2a, r4, &(0x7f0000001000)="1da3a20d82e56fc14177b6b05cbc6d711f7a1aa337ce05dd5694f63079716f5d1166c5b61c43372063fc2e190d910edf94b294e8c29e6cdacbfa13db074fbc0f99b1d5e7697f9194945e38d57ef1088805e396d4efa2149ddaa230ebea17acb82bc0c89f062c234f73ca12ece5478ad5e4f37a838111e621a2fb2d76005ffe941da43536aca3d4e5eb516b6c7090fb809c84788963d183689dc25bd84de77dcc48bc851bbb73edb228", 0xa9, 0x9, 0x0, 0x2}, &(0x7f0000001140)) 10:27:09 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:09 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r4}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r7, r0, r5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r9, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r3, 0x2, 0x7, 0x3, 0x2c6, 0x2c, @loopback, @local, 0x700, 0x1, 0x5, 0x1}}) setregid(r6, 0x0) 10:27:09 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:09 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r8, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309) setregid(r5, 0x0) 10:27:09 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x19c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ae209a12d279263a7f17d1a16a366c0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cc92c57a954f79229411c7afda53de1366bc7a3d713664f1c52db946c3c4d22"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "195e1565eb9258714d0e84a38eedc398"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f541b37e39fefd328cd1f9c84341356e"}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r7) 10:27:09 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) r4 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb52, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, 0x40}}, 0x8000) 10:27:09 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) getsockname(r4, &(0x7f0000001000)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @bcast, @rose, @netrom, @null, @null, @null]}, &(0x7f0000001080)=0x80) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:09 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000f80)) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:09 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) 10:27:21 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) 10:27:21 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:27:21 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x19c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ae209a12d279263a7f17d1a16a366c0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cc92c57a954f79229411c7afda53de1366bc7a3d713664f1c52db946c3c4d22"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "195e1565eb9258714d0e84a38eedc398"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f541b37e39fefd328cd1f9c84341356e"}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 10:27:21 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:21 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r8, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) setregid(r5, 0x0) 10:27:21 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) 10:27:21 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:32 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000f40)) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) 10:27:32 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) 10:27:32 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:32 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:32 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) 10:27:32 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:27:32 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r8, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) setregid(r5, 0x0) 10:27:32 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:32 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r8, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) setregid(r5, 0x0) 10:27:32 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:32 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) 10:27:32 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:27:32 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) syz_open_dev$vcsn(&(0x7f0000000f00), 0x100, 0x80) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:32 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) 10:27:32 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) 10:27:32 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r8, &(0x7f0000000700)=""/69, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000780)) setregid(r5, 0x0) 10:27:32 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) connect$802154_dgram(r0, &(0x7f0000000780)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) 10:27:32 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:32 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x577}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000, 0xffffffff, 0xffff0000, 0x4, 0xffffffc6, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c011}, 0xc000) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:32 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:44 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:44 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:44 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) 10:27:44 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) 10:27:44 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) read$snapshot(r8, &(0x7f0000000700)=""/69, 0x45) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) setregid(r5, 0x0) 10:27:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) 10:27:44 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:44 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:44 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) setregid(r5, 0x0) 10:27:44 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000440)=0x40, &(0x7f0000000480)=0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:44 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000d00)=0x1df5, 0x4) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) [ 175.556927] Bluetooth: hci5: command 0x0406 tx timeout [ 175.557924] Bluetooth: hci2: command 0x0406 tx timeout [ 175.558851] Bluetooth: hci4: command 0x0406 tx timeout [ 175.559749] Bluetooth: hci0: command 0x0406 tx timeout [ 175.560608] Bluetooth: hci7: command 0x0406 tx timeout [ 175.561526] Bluetooth: hci3: command 0x0406 tx timeout [ 175.562422] Bluetooth: hci6: command 0x0406 tx timeout [ 175.563332] Bluetooth: hci1: command 0x0406 tx timeout [ 179.140854] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.142294] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.143364] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.144796] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.146447] Call Trace: [ 179.147363] [ 179.148174] __schedule+0x893/0x2470 [ 179.148819] ? io_schedule_timeout+0x150/0x150 [ 179.149569] ? do_raw_spin_lock+0x121/0x260 [ 179.150299] ? rwlock_bug.part.0+0x90/0x90 [ 179.151024] schedule+0xda/0x1b0 [ 179.151586] rescuer_thread+0x851/0xdb0 [ 179.152277] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.153130] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.153978] ? lockdep_hardirqs_on+0x79/0x100 [ 179.154749] ? worker_thread+0x1260/0x1260 [ 179.155447] kthread+0x2ed/0x3a0 [ 179.156043] ? kthread_complete_and_exit+0x40/0x40 [ 179.156864] ret_from_fork+0x22/0x30 [ 179.157531] [ 179.157953] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.159009] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.159916] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.161197] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.162505] Call Trace: [ 179.162944] [ 179.163311] __schedule+0x893/0x2470 [ 179.163957] ? io_schedule_timeout+0x150/0x150 [ 179.164700] ? do_raw_spin_lock+0x121/0x260 [ 179.165391] ? rwlock_bug.part.0+0x90/0x90 [ 179.166147] schedule+0xda/0x1b0 [ 179.166733] rescuer_thread+0x851/0xdb0 [ 179.167372] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.168189] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.169036] ? lockdep_hardirqs_on+0x79/0x100 [ 179.169791] ? worker_thread+0x1260/0x1260 [ 179.170481] kthread+0x2ed/0x3a0 [ 179.171067] ? kthread_complete_and_exit+0x40/0x40 [ 179.171900] ret_from_fork+0x22/0x30 [ 179.172523] [ 179.172933] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.173973] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.174819] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.176021] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.177319] Call Trace: [ 179.177743] [ 179.178098] __schedule+0x893/0x2470 [ 179.178728] ? io_schedule_timeout+0x150/0x150 [ 179.179426] ? do_raw_spin_lock+0x121/0x260 [ 179.180125] ? rwlock_bug.part.0+0x90/0x90 [ 179.180823] schedule+0xda/0x1b0 [ 179.181360] rescuer_thread+0x851/0xdb0 [ 179.182010] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.182873] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.183664] ? lockdep_hardirqs_on+0x79/0x100 [ 179.184398] ? worker_thread+0x1260/0x1260 [ 179.185144] kthread+0x2ed/0x3a0 [ 179.185724] ? kthread_complete_and_exit+0x40/0x40 [ 179.186514] ret_from_fork+0x22/0x30 [ 179.187202] [ 179.187583] INFO: task netns:6 blocked for more than 143 seconds. [ 179.188560] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.189442] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.190643] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.191977] Call Trace: [ 179.192391] [ 179.192791] __schedule+0x893/0x2470 [ 179.193434] ? io_schedule_timeout+0x150/0x150 [ 179.194182] ? do_raw_spin_lock+0x121/0x260 [ 179.194901] ? rwlock_bug.part.0+0x90/0x90 [ 179.195610] schedule+0xda/0x1b0 [ 179.196197] rescuer_thread+0x851/0xdb0 [ 179.196866] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.197664] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.198469] ? lockdep_hardirqs_on+0x79/0x100 [ 179.199219] ? worker_thread+0x1260/0x1260 [ 179.199939] kthread+0x2ed/0x3a0 [ 179.200500] ? kthread_complete_and_exit+0x40/0x40 [ 179.201327] ret_from_fork+0x22/0x30 [ 179.201988] [ 179.202367] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 179.203396] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.204261] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.205576] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.206881] Workqueue: 0x0 (ata_sff) [ 179.207493] Call Trace: [ 179.207924] [ 179.208301] __schedule+0x893/0x2470 [ 179.208931] ? io_schedule_timeout+0x150/0x150 [ 179.209706] schedule+0xda/0x1b0 [ 179.210261] worker_thread+0x15f/0x1260 [ 179.210947] ? process_one_work+0x16a0/0x16a0 [ 179.211698] kthread+0x2ed/0x3a0 [ 179.212242] ? kthread_complete_and_exit+0x40/0x40 [ 179.213096] ret_from_fork+0x22/0x30 [ 179.213742] [ 179.214108] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.215136] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.215962] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.217163] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 179.218452] Workqueue: 0x0 (kblockd) [ 179.219078] Call Trace: [ 179.219482] [ 179.219872] __schedule+0x893/0x2470 [ 179.220489] ? io_schedule_timeout+0x150/0x150 [ 179.221280] schedule+0xda/0x1b0 [ 179.221850] worker_thread+0x15f/0x1260 [ 179.222507] ? process_one_work+0x16a0/0x16a0 [ 179.223239] kthread+0x2ed/0x3a0 [ 179.223814] ? kthread_complete_and_exit+0x40/0x40 [ 179.224567] ret_from_fork+0x22/0x30 [ 179.225230] [ 179.225594] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.226638] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.227470] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.228633] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.229997] Call Trace: [ 179.230413] [ 179.230808] __schedule+0x893/0x2470 [ 179.231413] ? io_schedule_timeout+0x150/0x150 [ 179.232151] ? do_raw_spin_lock+0x121/0x260 [ 179.232858] ? rwlock_bug.part.0+0x90/0x90 [ 179.233561] schedule+0xda/0x1b0 [ 179.234129] rescuer_thread+0x851/0xdb0 [ 179.234770] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.235548] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.236361] ? lockdep_hardirqs_on+0x79/0x100 [ 179.237112] ? worker_thread+0x1260/0x1260 [ 179.237804] kthread+0x2ed/0x3a0 [ 179.238335] ? kthread_complete_and_exit+0x40/0x40 [ 179.239116] ret_from_fork+0x22/0x30 [ 179.239755] [ 179.240125] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.241220] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.242032] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.243199] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.244498] Call Trace: [ 179.244932] [ 179.245290] __schedule+0x893/0x2470 [ 179.245912] ? io_schedule_timeout+0x150/0x150 [ 179.246620] ? mark_held_locks+0x9e/0xe0 [ 179.247287] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.248085] schedule+0xda/0x1b0 [ 179.248618] rcu_tasks_one_gp+0x3db/0xc10 [ 179.249328] rcu_tasks_kthread+0x80/0xa0 [ 179.249978] ? rcu_tasks_postscan+0x10/0x10 [ 179.250645] kthread+0x2ed/0x3a0 [ 179.251221] ? kthread_complete_and_exit+0x40/0x40 [ 179.252009] ret_from_fork+0x22/0x30 [ 179.252616] [ 179.255974] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.257829] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.258717] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.259914] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.261257] Workqueue: 0x0 (events_highpri) [ 179.261989] Call Trace: [ 179.262402] [ 179.262802] __schedule+0x893/0x2470 [ 179.263438] ? io_schedule_timeout+0x150/0x150 [ 179.264207] schedule+0xda/0x1b0 [ 179.264798] worker_thread+0x15f/0x1260 [ 179.265470] ? process_one_work+0x16a0/0x16a0 [ 179.266226] kthread+0x2ed/0x3a0 [ 179.266851] ? kthread_complete_and_exit+0x40/0x40 [ 179.267642] ret_from_fork+0x22/0x30 [ 179.268298] [ 179.268706] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.269781] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.270586] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.271745] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.273044] Call Trace: [ 179.273436] [ 179.273823] __schedule+0x893/0x2470 [ 179.274420] ? io_schedule_timeout+0x150/0x150 [ 179.275180] ? do_raw_spin_lock+0x121/0x260 [ 179.275887] ? rwlock_bug.part.0+0x90/0x90 [ 179.276557] schedule+0xda/0x1b0 [ 179.277136] rescuer_thread+0x851/0xdb0 [ 179.277794] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.278577] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.279345] ? lockdep_hardirqs_on+0x79/0x100 [ 179.280048] ? worker_thread+0x1260/0x1260 [ 179.280734] kthread+0x2ed/0x3a0 [ 179.281266] ? kthread_complete_and_exit+0x40/0x40 [ 179.282037] ret_from_fork+0x22/0x30 [ 179.282625] [ 179.283065] [ 179.283065] Showing all locks held in the system: [ 179.283985] 1 lock held by rcu_tasks_kthre/11: [ 179.284660] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.286155] 1 lock held by khungtaskd/25: [ 179.286779] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.288137] 3 locks held by systemd-journal/112: [ 179.288851] 1 lock held by in:imklog/212: [ 179.289476] 3 locks held by syz-executor/4297: [ 179.290168] [ 179.290428] ============================================= [ 179.290428] 10:27:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) 10:27:55 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@cache_loose}, {@uname={'uname', 0x3d, '{&+!-^.)+,'}}, {@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@version_9p2000}, {@access_user}], [{@obj_role={'obj_role', 0x3d, 'afid'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', r3}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) setregid(r5, 0x0) 10:27:55 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x4d, 0x20, 0x0, 0x4f, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0x1}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2979, 0x6, 0x7ff, 0x0, 0x3ff, 0x40a60090, r1}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x9, 0x5fd, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x700, 0x8, 0x9, 0xf2}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x13, 0x4, 0x1f, 0x12, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9, 0x20, 0x3, 0x800}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@local, @mcast2, @private1, 0xa0, 0x2, 0x8, 0x500, 0x9, 0x8, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe, r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x4000) 10:27:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x24, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:55 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0xa5, 0x3f, 0x3, 0x40, @private2, @mcast2, 0x80, 0x700, 0x8000, 0x1}}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) 10:27:55 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:55 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:55 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) syz_open_dev$vcsn(&(0x7f0000000540), 0xc654, 0x18e40) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) setregid(r5, 0x0) 10:27:55 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0x9, 0x8, 0xbd, 0xc5, 0x88}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000a80)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000ac0)={0xfffffffffffffffc, 0x8}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000b00)={0x8, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xff, 0x24880) read$snapshot(r0, &(0x7f0000000b80)=""/93, 0x5d) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x801, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c40)=0x542, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x400000) 10:27:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 10:27:55 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x7, 0x33, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1f, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x80, 0x1, 0x4, 0xf5c}, {0x4, 0x9, 0x8, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x722b, 0x1, 0x6, 0x1}, {0x9, 0x0, 0x20, 0x7}, {0x0, 0x4, 0x1, 0x8001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', r7, 0x4, 0x1, 0x5, 0xff, 0x12, @empty, @empty, 0x8000, 0x40, 0x200, 0xfffffe00}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', r2, 0x2b, 0x0, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x700, 0x7ff, 0xf4}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) bind(0xffffffffffffffff, &(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x39eb, @empty, 0x101, 0x4}, 0x80) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b726a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443f760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02bda8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7723a375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e622398}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1001) 10:27:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0xa0, 0x92, 0x0, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x3a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xf7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x9bae, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x10000, 0x25, @mcast2, @remote, 0x20, 0x10, 0xba, 0x3}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000d80)=""/4096) 10:27:55 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000040)="471148f3cbe474d0d20c0ca071ef6fe9db0fb71f2eb63cd57155549fc4a6a84d862f3bc43e54c5e9288c0b5237d333e59e6eeac6f567281cb9aa3a3149bf72855c49", 0x42, 0x40030, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x17a}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xcd, 0x8, 0x3, 0x0, @mcast2, @private1, 0x7800, 0x1, 0x4, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x198}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4729a2ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x58, 0x9ef, 0x7, 0x800, 0x1, 0x7fffffff, 0x1ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf687}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x9, 0x3, 0x0, 0x3f, 0x140, 0xffffffff, 0x8, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x430}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x569c2880}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x139}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x40, 0x20, 0x20, @empty, @local, 0x10, 0x0, 0x101, 0x5}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x84114000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x228, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x40050) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendto(r4, &(0x7f00000010c0)="e843333e2359657f88f22eb4cc9e55e6084513f4c059e67f2a6ca44ceae80bb91e41b3e1540b77ea52867a2592d001c90ed882754ea5d7fc6f7762c356a354ce0b54ac14076c7bd407d6b6e8edbcb9299277a57ade37e68f599e37962e01c621594d2f012415164e0bb160ed709fb8f11659eb9d47f19411c3cbb719848b427fd587fe33152529443b0088651f43cbd2ebec7fc94beb07588f25081d00898f7b66e0", 0xa2, 0x0, &(0x7f0000001180)=@generic={0xf8c91ca6f31631e4, "3ff2ae5d7e8802d34b8520d500a600982955dbecb7521b0cc07c0d974e563f9e4734a7bae8d041c35f9088fcf452dec769d8783f5efe394f5adfb38e3d61997acc938cc2bbf11593948edba5ed4fdf195cc4bc7c5465d32ac98ec736e0788c1365145f52ab65c0f6204c6f14296dd8f6829cdd2f10a044a3ce71c8f8e521"}, 0x80) 10:27:55 executing program 3: r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0806, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@access_user}, {@version_L}, {@afid}, {@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@noextend}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, ').'}}]}}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) getegid() setresgid(r6, r0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000003c0)) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9000, r2, &(0x7f0000000400)="7fd1c5b08f71fc3927e4c5020d0f0613a126cfa18ade0e43d2e155fee1e64773f21022a834a906f271066583abf602f11c926e9d81b9c0d961323877", 0x3c, 0x8, 0x0, 0x1}, &(0x7f0000000480)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0xc002, 0x0) setregid(r5, 0x0) 10:27:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x14, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000900) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) 10:27:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="352eee7fce7984ee9a9ddcf550711f3f57b21791f96718305f83f518520234aad1ede9f2a8acdd7de776fbe76d963e9dd3c2e9e4f5d633ff33f58c614bdc8f69024b5602237c7fc2165d920fac993e532166576f106d9df585b5cf92540bfe7990f510d0eb021cef303814974b9865bfa6c7254257e1a86c01c4348151db33bb80526de0df62a8929a6bc04dcb1c7c0617ec5a27e59392fa8c90d1676c0eba1f07897edd0493e858a6d579a49f36a62eed446d56c3451ce700ebb7c8a4d7acdcfeca5352452a", 0xc6}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)="edb77bbca5994f575b2ebf20da605a816667d4b0fa4f9d56e863ce030510051a7d5cd3060f526205eb9b3fee85957564c5ecdee1be156a292e0170583ab397639913a3468eb8d7e78ee00797eb8aff1fefba2bfee0903aa5eff2c063f4c994cc1f6ff4e94e0db4f647c8190b25e7743c148cb386c3f9bb769f556e9fb05e1996e80e7eee9c67ace8a9db8e509611aa3bec025431aa6143679dbc72afba27c3b62b68b152ff13e42b640ad026525a729435dbfa1c6f4dd7417b4b68692ad158dabef790913cf672e11776b6edea70a2397d61d6d1241dd29acdeba668d42ede42bbe6e7794f47", 0xe6) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$802154_dgram(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) VM DIAGNOSIS: 10:27:50 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc6ff38650 CR3=000000000dd16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 415d7ffe623effdd YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f740c4873544e12 YMM04=0000000000000000 0000000000000000 00000000008a7c10 00000000008a270a YMM05=0000000000000000 0000000000000000 00000000005d0bfc 00000000005f33d4 YMM06=0000000000000000 0000000000000000 00000000008a1f4c 00000000005d0546 YMM07=0000000000000000 0000000000000000 00000000004643c1 00000000008a1220 YMM08=0000000000000000 0000000000000000 78307b3d434f4c54 4143534c4d5f415f YMM09=0000000000000000 0000000000000000 3332323665377830 202c397830202c38 YMM10=0000000000000000 0000000000000000 7d30377830202c7d 5d7d5d7d5d7d3839 YMM11=0000000000000000 0000000000000000 2c307830202c3078 30202c317830202c YMM12=0000000000000000 0000000000000000 0a29313030317830 202c7d3034783020 YMM13=0000000000000000 0000000000000000 4d435f3131323038 4c4e2467736d646e YMM14=0000000000000000 0000000000000000 666678302853545f 58545f4c45445f44 YMM15=0000000000000000 0000000000000000 202c666666666666 6666666666666666 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff1100310cf2b RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff85407260 RBP=ffffffff85407260 RSP=ffff8880188678f8 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001 R12=ffff88800ffeb580 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff84253554 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa23947b900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa238893310 CR3=000000000edb2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 4aed92bbf0b08d3d 0000000000134c58 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 a32f0bf35415f98e 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000