10d67013997613aa8bc558009e27466c1cde0d8a0664d5b11e2611eb7f966249342342b9d58565c1feff9b3bff3229f1663052acfc6be852546a10c8b60f9ce2e6b418fcc0118f6cfcf83a607dffdc2d1e99d0ae1b7fe47f148cd6d60b62d42b3939fa10e214032f2f949c7f5a93e25c6c039130aad8d65cb4096a80685b9f26fe9cb9cc1e8292e80fa2163f3a4429f5b220348e6407130a878aa3c47b56f071694e38d60fa767941b3a9366aa06b489bb813fe7dd9045ba5e7bbfc41148e06806ef36ac8f459a30d7a77240ddec11c796eeaf8f0d15e7195c3a5e5f942a46d547f1aa080ce22a65f81d3376"}, @op={0x18}, @op={0x18}], 0x1060, 0x1}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002000)="2f61f5e83970b48eae1cfe9c27b5ed9148461fc0ad1f5f2ea96748c2d8538b8acd8f0dd4b6ba980091f6c8f9604067d6c126794ba00409ef21e460c9c17c1c2136b37256d6dbae2ed32440ac50d2f242aa007e87580ec93ba726de0633a1c8b4aa7743e121faea12c4e27fed0b893be8be105134e7aece2bf475ed937092c76e155918d3f2a8e2a72427830d592d689eb8d39f3448e05119d2d8a72fe82c78abd198b1", 0xa3}, {&(0x7f00000020c0)="4089430d7e3d2dd8af6e4a427258d84994caf97edac111fb47f10b20d9487c45e653caa0bf3f39966ba8f07f8beeb274f3bb9b83ab19b91a7c8f8b06efaf01666f79e2384af772037a512149a351352e9f225980dc2722929831d693ed8492980f77879a4179363e4c4453ac5bef2aca0d1a0ba117864e99fe7c6c3a6284f872f9f621181d974f133b1a5ecce8183f0576bea154f0efd421b9f7962c1276c1117731", 0xa2}, {&(0x7f0000002180)="1d57bd086042e5853a6c61a19c93a783071a2f8fd55380709221cf2173c76d7fdea55ae735d18884cde885cf9c30eaf36b6da1ec841de2530a0a6d139029f4112993a2bbb9d445acc4cf5d9135fc8f374cc368c94a856deb9bf45a6fbe16cb1208ade809a5ca6a685f194d86bf9ed0e3544990addaa8833c823aec4dc4f98d1a5a1ba4dea35e0eb20af3541b4207d40a40a7953691a68d38570d3506dbcb3d9aeb54fd447242ab3b7e13097a79006cdb0e73c9f3ebbb70827a60dc95343e941343d2284721ed58d2d46122ddcad6025a058a7e1eb44a42e3077f", 0xda}, {&(0x7f0000002280)="f1b31358643baac5135beaf2920e5913535c777c2c7a5a10625076f124222fdbb7be87663fde82633727081f22c45038b34d40b069096137c237cebeaa21", 0x3e}, {&(0x7f00000022c0)="9144abbd07c1d81b73401eb281fdcbdb102f573231e5b4c4de5d3b8881866192f9e453abd578adaa962ef40f135c357489bdd2a5b0c3f16c469c82a07e8b65593c3b881eb5aa734b04f443a9bd9517e5f4d245a9769cb31d0d4c8959045f4ba21ebeeedd85786cebf9b7243008184239e7218aece313f3fc77e2a4b2d6fc3f698be1646d0f34ee6445c181385e4ed8b3736d8218cca9150af3a909205392bd867faa09e723373d2e2dc85bc3f4a78eb21955253f191a5242", 0xb8}, {&(0x7f0000002380)="194776a86a9641939cf5260f34d630957b722b00c19dcdcd72e0cb36cc020aeb5802883c4b9d54ea80a7cb7b5a06a1ab20c444895b94e5aaf8d81059f624ac9ab8313cd8d2f5c676efb64eb4e41d", 0x4e}], 0x6, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x60, 0x117, 0x2, 0x46, "bb842d127df83991ab781fe4f9a87e6b6d4c4381adf79d40fe3f27b582e8b97564cc0ed9bd0df0068745e8864fa7158fad1106d7f18108e4411a8a691e0cdd4456b8ad8afef4"}, @iv={0x30, 0x117, 0x2, 0x16, "12cb315d8464d377a091ab6d3ca1db340f28a0903695"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x138, 0x40400c0}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000025c0)="52c257a713318d6ad3f49995fddfc16baf034711b9a11ccc7371ca1dbc7961f4d195a2348a7e7c75d6e929d287cc9c6d2d3eca814df63e5b8921cbb6520ee107801df4d27b89a927acc7b373939441323c5886ecdc800188b6f8831d6fd7b7d33ff9fdb1c8f80dbd96fb12db2ca66800000000", 0x73}, {&(0x7f0000002640)="af05277cceef819789fc6f8b48ebbecb7c5b76d4f8c57eaf93f79f1bbf70daf7e53de82897f8c80335e2dd2fb4", 0x2d}, {&(0x7f0000002680)="35c600101ff0e5d33da5b02c29d391d2b05088015e7985a67135da489710970c6db4bc05a885466f4c9add63b5958a32891be934000877b42c7d3313d6ee790dcaf41db566f1990a2ed52bdc2f8ca965340a29f75a77aba5bd50938b7271c00259750c259007d58f80ccfcabc7b7f3b54f4b59b1791201e9d8798fe00c5f53f2883e576055dd11b9f04398846b9e74f3095ed944f85dc1eb125dee669c195a016aacdea1ee74cc5c018b11a17087900208543094ebeab1c1b4b43743f63044ab9c729517d0ee923cc453161255343e66a81cc097461b1d9f6f285da01893eeb7cb7cd29a5c9a254e9993e8c88dd0270969d146f67bc441d8b5", 0xf9}, {&(0x7f0000002780)="df04f9358bcbe7e100a751be28e27d9661f12e91eefc3cefc76da5caf1649e38e465cf82a2c8e3ccbde2a79823696e6bf40f307b0515332773f5c8c71d43371d62f5bd3fb572d45f99cc165172396d399a1bd6ff5c7209ac6377f771fbb0de101e4aabb6427961e1a4e575a0615466a656a3cf44662cedacb63b7411315b010cd46747294bd877e97a83a85029dc3b2125a5a1893c98f48408f2c54a622cf599c877964394e202a57c52161d3bf313ca0eb97ffdc8e6c649c360e74ccf544e", 0xbf}, {&(0x7f0000002840)="b81e6cdb48c929e8ca732c64b87f54afd1617710e45f348d67f43095e8b946dfb2bbdb7f06e969cde8b90d9d662822668a2d13549e9d51afa807551ab0dd9b0859d1311699f96a0e4b2db435362c75d88717a56383bb21faa5028621f03a2c5d0409bde94d31fc32069c91150a0627da937e87ca45b2bc3f7a309493f4b756b2daadd77b", 0x84}], 0x5, 0x0, 0x0, 0x34}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002980)="a37d9e9a6c5761d04c335069229059140cc65c83289d494b3416acdc08e3af1d5b07ca7ac05b2a8be7d53b9dfdb7edb03cf922329631fdabc1ac0ebfb6a25e9ad144340c77f1f238d4cd5cef110f9eb26c7d5a4e5a75a1fcf4208e09252672dccb4ebed95d1d28f7d46dce7e853ccebbd873d40b575099ef6719ccff15203c39076ac68dc2db2ad2a2ecbc44c4dfa8a25a9fcf70393d45465838c91a5458bbd3bc19b4c4fe462bb9fa17fc0303427c68f4d9f1f68c111d0ca99266bb21642c0a622561aa84e41bd0ffe2ec792d5cba83248a3a7a54a9b43669569d33456e6bc3ad267e80944c19d275c5eeb6", 0xec}, {&(0x7f0000002a80)="925ffb5964a14ce28d14c37d5c81877ebc437e1d7265", 0x16}, {&(0x7f0000002ac0)="5990627c3efc8872786f657f9b14a81ff92eb1e6ca13bfeb0209034c4a9543133c98b5e5c16eb232bf24eb9738a202c3af5143a7910de769b6522c49a58bfac4c904e32c21ac5f9e4f441894a6440843aa0e3a968a2ce69e0fde8706b1d26c13f8a4ff9e2770d2291e45b09f7e4293c85928d475d5290b1322056081c293c5ab20c31ad9d47d686584e0e2af0845847bfb7f27de69698031dff29353792b0290a8842e63e3cbefff689e1c5a40515d48f4ee2ac612bcc17a30daa03bbaedf86adcfde1cf04a51d4a77", 0xc9}], 0x3, 0x0, 0x0, 0x1}], 0x6, 0x20040010) (async) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async, rerun: 32) r2 = getpid() (rerun: 32) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x81, 0x0, 0x0, 0x200, r2}) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/26) 00:17:06 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000500)=0x20001, 0x4) r1 = shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008840) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:06 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) (async) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) 00:17:06 executing program 2: shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) (async) 00:17:06 executing program 3: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002c00)=[{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)=[@iv={0xd8, 0x117, 0x2, 0xc4, "fea83fdfb98fdb21600fef527ffefded34b5e33825ac755014fbace29bf034b3ffcc141d880d0394182d4c0bb64de6fe52a7d43a818716638f3b5eb7353dd54d1562600e7b524ed857a0130c342458bf1ab1c4047b0ffc109f448ad126a81f660002c95eebfa80cbf6d505a873717ab378117a510d18a02c53e3b3103e1fa6f459c80f08df109203c3442f9f594c6d9740b53fb7c3c03ea5894f22732484ba30d6fda45883ec7e7014134be3109e8ab812aeb13607d216c504bbe456e761252fa74a3c37"}, @op={0x18, 0x117, 0x3, 0x1}], 0xf0, 0xc044}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="278a480c6c46327af9c4e52292699910e78d685e04f5d4f51963c623", 0x1c}, {&(0x7f0000000540)="38dc12532576797f521954011749603ef00695538214393fba60cfae825db437be18d1dbc3be5d1058e79198b16276a7da2ae6498483154cb508a2ceb09f3ffd843b1317fdc9c735b46a9a81fb1b433b23e88ee4565de8044a710d0c74cc34d6bc17155a72dad0ba952c63e530fa393d407860a219f9daab7d4fcbd74d25996fd55175a0695cd8550dcf9ab574594a4a6ff75e73ac2c875015aba1226b2531d7dd24", 0xa2}, {&(0x7f0000000600)="6d2e38e65e1eb84978f2967406cbf785e62739d415dd14185d8b7d0de9fcb1f0a37e3a0e7401f259f3ef1faf3126aab7", 0x30}, {&(0x7f0000000700)="b379d2d8e30282fcc3eb8e9dab13869910e7da9d69c7cb47c335c2185f3e9d9b7dba253612649d87a876284ee5e20d784547ddfe4164671305076ea15dfbf1b117a4abc2a56f88d649a07e687d2951a83a5de0e821e95890b7d93c0e5ae41e82085055456e8055b66383651b930a7249f2a475e3a0b238bffb9089957fa76a363d18a4b53e5970152480ac8d8d963ca19426936d1c641eb4d5b9044a105513f6670a7d78e1ddddd42e742b606f2d1763b881e4e40599304fbdbc4fc7483e975add23332af0d2108088454573d6", 0xcd}, {&(0x7f0000000640)="a066", 0x2}, {&(0x7f0000000800)="7f3265fb35e39332f571aa47e36fbdfcd44a193f946dccf94e44133454e1d4e91d05ffef879d75c36af48b53aea155d60c032e3f56267f72c7b39ddd467d961c13a2dc483183ce52eacb49594e8c64ec8b3bf0cc7e66981603962188fb2b39495e48ae26322e3afd9719144a5b0ce1b926bb4f742b3615ec993342f295debecd6ea5c4ab3188c0f34b30453448d7439040f474b74222497aa017987bcd3577d7d71a669ef0ebc32088de6762556b983c7b54709b0de3ae0cf926bc50911abcfe9e97", 0xc2}, {&(0x7f0000000900)="d42fa1c7d5f60263d515cbd09cddcca694c7086d666bdef9a22eda5785b7ff14beb0e4847acd6b5b5094834497b58ad0d34d9010734bc477a42e45340e346817299cd1be118574af70f8c5f755ee7d118f556e03b006d6abc99fb836128a91a03786c5d4fac162ff2c2ef9838cdb50652807d19cc0015bed6315ae205773269ec9d2acfa17c8497e69e9bb4deb7f00c1b2b43c8122b2a77807d6dcdf22b0f69876ec7e3e3d6a3666104396d4dc559823e41ede7bd227894c4e65", 0xba}], 0x7, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x80, 0x117, 0x2, 0x66, "e7b4c56ec2c1506a698f3ace34d379e4412c0fe6400b5b87b7aa795a8187183c9553a00348db755fc2dcc63fd0a62e0124ae4054adfda48e5a780aae40aafdaa3e61fb53bf2c8775e1019a225159f270103fb80f6d8af4e88bb609a52dc2cdf06ebb333e11af"}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x68, 0x117, 0x2, 0x53, "f4fb46b164692de388b54a33b415a4b7320d60a5ac071d8c5de3ac2aa8815ca0ab81fa17105323aa7c950b40febd00a6b4dd37b34346e431c829d34a97a02c714569f69d248f1754e8bea0e0b86b11a0e0e7fc"}], 0x160, 0x20000004}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="ae2b6a96173503aa26f8624463646f3ac25271bf173af9619bd3ccdd3598a789d20725d62aa12472d9d886c0a71a48b47348442e395b8ad6632db29b3409211e9fc23e8fb874d2cc464b5436111271851d39c5917fd94ca6232385f50a013c67bf434b7fba220ed3b8f30285ae1f9adade3f9dd440ba212dd24c2113895b169c8a37a5592b27dc36f3981895d8522f90c3bf6b3bf1aa16e8c996abd9252850da99bd30c2dd797b6c9b", 0xa9}, {&(0x7f0000000c80)="29c2724c1bb896427e262b811f1666ed8845457f08046309811de95cf9c079d13d49640e12edd811b381fd01014c0a54bc6ee52b2eaba30e93db677660de5e1a6bedbd81b9b5bb15c9bd5c89f6f309f8e208e25ff16c70699dc63d23bedc31f94439c2e85ab501155fb6ee3abcb18a027bea2a443484b471eb46337dee762431063d6a4349d463123a3f4f45ca4cfe248a7ac642cb3b91c2972317d8c1e22d73", 0xa0}, {&(0x7f0000000d40)="a241516ab6968f51b2eef642ecacfd90b0c2886f2ba1c370218379bba8d929e0b839e7cc97ce20f7b71a22749d5a9cdf4540c5fc6242027b72983bfc5ce1bd2f8f81cb63b53f", 0x46}, {&(0x7f0000000680)="beab4392f05ada47cd59130c3f3a868b478c727218f5ce7edcbd6c70168b771ffaf5a4a94f6a6d70f75a1a91963d52b3f701170110da9e38", 0x38}, {&(0x7f0000000dc0)="4755771d0dbd4c7683852cf58bfe80a80c4fc4302d0fea876f840e293bf89b1d844c84222379f2247281bee1b9c76a192542ac4512d429a71f9c993af0bf97187887292320d0e984b255e4e544e372c555390a338345fdaf47", 0x59}, {&(0x7f0000000e40)="087ce8c8fb551d0e5c50380ec45e7782d33ae7f9f2298f280ee6ab046a352a5aad3e85685f3bc38c048ba99711c83392f4cdabe781ec9a3978aa503ba6511c385303334887659b240cf54f56f14181b2b2bf5ebdf639f393d090a0e31bb8a24bd730650337ce52bf5b1c2a1238798412e155a462dff78192ea93e68be0aaafcd827c74545d8ec1273d2692245f2f13fd7b53c9", 0x93}], 0x6, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @op={0x18}], 0x1060, 0x1}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002000)="2f61f5e83970b48eae1cfe9c27b5ed9148461fc0ad1f5f2ea96748c2d8538b8acd8f0dd4b6ba980091f6c8f9604067d6c126794ba00409ef21e460c9c17c1c2136b37256d6dbae2ed32440ac50d2f242aa007e87580ec93ba726de0633a1c8b4aa7743e121faea12c4e27fed0b893be8be105134e7aece2bf475ed937092c76e155918d3f2a8e2a72427830d592d689eb8d39f3448e05119d2d8a72fe82c78abd198b1", 0xa3}, {&(0x7f00000020c0)="4089430d7e3d2dd8af6e4a427258d84994caf97edac111fb47f10b20d9487c45e653caa0bf3f39966ba8f07f8beeb274f3bb9b83ab19b91a7c8f8b06efaf01666f79e2384af772037a512149a351352e9f225980dc2722929831d693ed8492980f77879a4179363e4c4453ac5bef2aca0d1a0ba117864e99fe7c6c3a6284f872f9f621181d974f133b1a5ecce8183f0576bea154f0efd421b9f7962c1276c1117731", 0xa2}, {&(0x7f0000002180)="1d57bd086042e5853a6c61a19c93a783071a2f8fd55380709221cf2173c76d7fdea55ae735d18884cde885cf9c30eaf36b6da1ec841de2530a0a6d139029f4112993a2bbb9d445acc4cf5d9135fc8f374cc368c94a856deb9bf45a6fbe16cb1208ade809a5ca6a685f194d86bf9ed0e3544990addaa8833c823aec4dc4f98d1a5a1ba4dea35e0eb20af3541b4207d40a40a7953691a68d38570d3506dbcb3d9aeb54fd447242ab3b7e13097a79006cdb0e73c9f3ebbb70827a60dc95343e941343d2284721ed58d2d46122ddcad6025a058a7e1eb44a42e3077f", 0xda}, {&(0x7f0000002280)="f1b31358643baac5135beaf2920e5913535c777c2c7a5a10625076f124222fdbb7be87663fde82633727081f22c45038b34d40b069096137c237cebeaa21", 0x3e}, {&(0x7f00000022c0)="9144abbd07c1d81b73401eb281fdcbdb102f573231e5b4c4de5d3b8881866192f9e453abd578adaa962ef40f135c357489bdd2a5b0c3f16c469c82a07e8b65593c3b881eb5aa734b04f443a9bd9517e5f4d245a9769cb31d0d4c8959045f4ba21ebeeedd85786cebf9b7243008184239e7218aece313f3fc77e2a4b2d6fc3f698be1646d0f34ee6445c181385e4ed8b3736d8218cca9150af3a909205392bd867faa09e723373d2e2dc85bc3f4a78eb21955253f191a5242", 0xb8}, {&(0x7f0000002380)="194776a86a9641939cf5260f34d630957b722b00c19dcdcd72e0cb36cc020aeb5802883c4b9d54ea80a7cb7b5a06a1ab20c444895b94e5aaf8d81059f624ac9ab8313cd8d2f5c676efb64eb4e41d", 0x4e}], 0x6, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x60, 0x117, 0x2, 0x46, "bb842d127df83991ab781fe4f9a87e6b6d4c4381adf79d40fe3f27b582e8b97564cc0ed9bd0df0068745e8864fa7158fad1106d7f18108e4411a8a691e0cdd4456b8ad8afef4"}, @iv={0x30, 0x117, 0x2, 0x16, "12cb315d8464d377a091ab6d3ca1db340f28a0903695"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x138, 0x40400c0}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000025c0)="52c257a713318d6ad3f49995fddfc16baf034711b9a11ccc7371ca1dbc7961f4d195a2348a7e7c75d6e929d287cc9c6d2d3eca814df63e5b8921cbb6520ee107801df4d27b89a927acc7b373939441323c5886ecdc800188b6f8831d6fd7b7d33ff9fdb1c8f80dbd96fb12db2ca66800000000", 0x73}, {&(0x7f0000002640)="af05277cceef819789fc6f8b48ebbecb7c5b76d4f8c57eaf93f79f1bbf70daf7e53de82897f8c80335e2dd2fb4", 0x2d}, {&(0x7f0000002680)="35c600101ff0e5d33da5b02c29d391d2b05088015e7985a67135da489710970c6db4bc05a885466f4c9add63b5958a32891be934000877b42c7d3313d6ee790dcaf41db566f1990a2ed52bdc2f8ca965340a29f75a77aba5bd50938b7271c00259750c259007d58f80ccfcabc7b7f3b54f4b59b1791201e9d8798fe00c5f53f2883e576055dd11b9f04398846b9e74f3095ed944f85dc1eb125dee669c195a016aacdea1ee74cc5c018b11a17087900208543094ebeab1c1b4b43743f63044ab9c729517d0ee923cc453161255343e66a81cc097461b1d9f6f285da01893eeb7cb7cd29a5c9a254e9993e8c88dd0270969d146f67bc441d8b5", 0xf9}, {&(0x7f0000002780)="df04f9358bcbe7e100a751be28e27d9661f12e91eefc3cefc76da5caf1649e38e465cf82a2c8e3ccbde2a79823696e6bf40f307b0515332773f5c8c71d43371d62f5bd3fb572d45f99cc165172396d399a1bd6ff5c7209ac6377f771fbb0de101e4aabb6427961e1a4e575a0615466a656a3cf44662cedacb63b7411315b010cd46747294bd877e97a83a85029dc3b2125a5a1893c98f48408f2c54a622cf599c877964394e202a57c52161d3bf313ca0eb97ffdc8e6c649c360e74ccf544e", 0xbf}, {&(0x7f0000002840)="b81e6cdb48c929e8ca732c64b87f54afd1617710e45f348d67f43095e8b946dfb2bbdb7f06e969cde8b90d9d662822668a2d13549e9d51afa807551ab0dd9b0859d1311699f96a0e4b2db435362c75d88717a56383bb21faa5028621f03a2c5d0409bde94d31fc32069c91150a0627da937e87ca45b2bc3f7a309493f4b756b2daadd77b", 0x84}], 0x5, 0x0, 0x0, 0x34}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002980)="a37d9e9a6c5761d04c335069229059140cc65c83289d494b3416acdc08e3af1d5b07ca7ac05b2a8be7d53b9dfdb7edb03cf922329631fdabc1ac0ebfb6a25e9ad144340c77f1f238d4cd5cef110f9eb26c7d5a4e5a75a1fcf4208e09252672dccb4ebed95d1d28f7d46dce7e853ccebbd873d40b575099ef6719ccff15203c39076ac68dc2db2ad2a2ecbc44c4dfa8a25a9fcf70393d45465838c91a5458bbd3bc19b4c4fe462bb9fa17fc0303427c68f4d9f1f68c111d0ca99266bb21642c0a622561aa84e41bd0ffe2ec792d5cba83248a3a7a54a9b43669569d33456e6bc3ad267e80944c19d275c5eeb6", 0xec}, {&(0x7f0000002a80)="925ffb5964a14ce28d14c37d5c81877ebc437e1d7265", 0x16}, {&(0x7f0000002ac0)="5990627c3efc8872786f657f9b14a81ff92eb1e6ca13bfeb0209034c4a9543133c98b5e5c16eb232bf24eb9738a202c3af5143a7910de769b6522c49a58bfac4c904e32c21ac5f9e4f441894a6440843aa0e3a968a2ce69e0fde8706b1d26c13f8a4ff9e2770d2291e45b09f7e4293c85928d475d5290b1322056081c293c5ab20c31ad9d47d686584e0e2af0845847bfb7f27de69698031dff29353792b0290a8842e63e3cbefff689e1c5a40515d48f4ee2ac612bcc17a30daa03bbaedf86adcfde1cf04a51d4a77", 0xc9}], 0x3, 0x0, 0x0, 0x1}], 0x6, 0x20040010) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x81, 0x0, 0x0, 0x200, r2}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/26) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002c00)=[{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)=[@iv={0xd8, 0x117, 0x2, 0xc4, "fea83fdfb98fdb21600fef527ffefded34b5e33825ac755014fbace29bf034b3ffcc141d880d0394182d4c0bb64de6fe52a7d43a818716638f3b5eb7353dd54d1562600e7b524ed857a0130c342458bf1ab1c4047b0ffc109f448ad126a81f660002c95eebfa80cbf6d505a873717ab378117a510d18a02c53e3b3103e1fa6f459c80f08df109203c3442f9f594c6d9740b53fb7c3c03ea5894f22732484ba30d6fda45883ec7e7014134be3109e8ab812aeb13607d216c504bbe456e761252fa74a3c37"}, @op={0x18, 0x117, 0x3, 0x1}], 0xf0, 0xc044}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="278a480c6c46327af9c4e52292699910e78d685e04f5d4f51963c623", 0x1c}, {&(0x7f0000000540)="38dc12532576797f521954011749603ef00695538214393fba60cfae825db437be18d1dbc3be5d1058e79198b16276a7da2ae6498483154cb508a2ceb09f3ffd843b1317fdc9c735b46a9a81fb1b433b23e88ee4565de8044a710d0c74cc34d6bc17155a72dad0ba952c63e530fa393d407860a219f9daab7d4fcbd74d25996fd55175a0695cd8550dcf9ab574594a4a6ff75e73ac2c875015aba1226b2531d7dd24", 0xa2}, {&(0x7f0000000600)="6d2e38e65e1eb84978f2967406cbf785e62739d415dd14185d8b7d0de9fcb1f0a37e3a0e7401f259f3ef1faf3126aab7", 0x30}, {&(0x7f0000000700)="b379d2d8e30282fcc3eb8e9dab13869910e7da9d69c7cb47c335c2185f3e9d9b7dba253612649d87a876284ee5e20d784547ddfe4164671305076ea15dfbf1b117a4abc2a56f88d649a07e687d2951a83a5de0e821e95890b7d93c0e5ae41e82085055456e8055b66383651b930a7249f2a475e3a0b238bffb9089957fa76a363d18a4b53e5970152480ac8d8d963ca19426936d1c641eb4d5b9044a105513f6670a7d78e1ddddd42e742b606f2d1763b881e4e40599304fbdbc4fc7483e975add23332af0d2108088454573d6", 0xcd}, {&(0x7f0000000640)="a066", 0x2}, {&(0x7f0000000800)="7f3265fb35e39332f571aa47e36fbdfcd44a193f946dccf94e44133454e1d4e91d05ffef879d75c36af48b53aea155d60c032e3f56267f72c7b39ddd467d961c13a2dc483183ce52eacb49594e8c64ec8b3bf0cc7e66981603962188fb2b39495e48ae26322e3afd9719144a5b0ce1b926bb4f742b3615ec993342f295debecd6ea5c4ab3188c0f34b30453448d7439040f474b74222497aa017987bcd3577d7d71a669ef0ebc32088de6762556b983c7b54709b0de3ae0cf926bc50911abcfe9e97", 0xc2}, {&(0x7f0000000900)="d42fa1c7d5f60263d515cbd09cddcca694c7086d666bdef9a22eda5785b7ff14beb0e4847acd6b5b5094834497b58ad0d34d9010734bc477a42e45340e346817299cd1be118574af70f8c5f755ee7d118f556e03b006d6abc99fb836128a91a03786c5d4fac162ff2c2ef9838cdb50652807d19cc0015bed6315ae205773269ec9d2acfa17c8497e69e9bb4deb7f00c1b2b43c8122b2a77807d6dcdf22b0f69876ec7e3e3d6a3666104396d4dc559823e41ede7bd227894c4e65", 0xba}], 0x7, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x80, 0x117, 0x2, 0x66, "e7b4c56ec2c1506a698f3ace34d379e4412c0fe6400b5b87b7aa795a8187183c9553a00348db755fc2dcc63fd0a62e0124ae4054adfda48e5a780aae40aafdaa3e61fb53bf2c8775e1019a225159f270103fb80f6d8af4e88bb609a52dc2cdf06ebb333e11af"}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x68, 0x117, 0x2, 0x53, "f4fb46b164692de388b54a33b415a4b7320d60a5ac071d8c5de3ac2aa8815ca0ab81fa17105323aa7c950b40febd00a6b4dd37b34346e431c829d34a97a02c714569f69d248f1754e8bea0e0b86b11a0e0e7fc"}], 0x160, 0x20000004}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="ae2b6a96173503aa26f8624463646f3ac25271bf173af9619bd3ccdd3598a789d20725d62aa12472d9d886c0a71a48b47348442e395b8ad6632db29b3409211e9fc23e8fb874d2cc464b5436111271851d39c5917fd94ca6232385f50a013c67bf434b7fba220ed3b8f30285ae1f9adade3f9dd440ba212dd24c2113895b169c8a37a5592b27dc36f3981895d8522f90c3bf6b3bf1aa16e8c996abd9252850da99bd30c2dd797b6c9b", 0xa9}, {&(0x7f0000000c80)="29c2724c1bb896427e262b811f1666ed8845457f08046309811de95cf9c079d13d49640e12edd811b381fd01014c0a54bc6ee52b2eaba30e93db677660de5e1a6bedbd81b9b5bb15c9bd5c89f6f309f8e208e25ff16c70699dc63d23bedc31f94439c2e85ab501155fb6ee3abcb18a027bea2a443484b471eb46337dee762431063d6a4349d463123a3f4f45ca4cfe248a7ac642cb3b91c2972317d8c1e22d73", 0xa0}, {&(0x7f0000000d40)="a241516ab6968f51b2eef642ecacfd90b0c2886f2ba1c370218379bba8d929e0b839e7cc97ce20f7b71a22749d5a9cdf4540c5fc6242027b72983bfc5ce1bd2f8f81cb63b53f", 0x46}, {&(0x7f0000000680)="beab4392f05ada47cd59130c3f3a868b478c727218f5ce7edcbd6c70168b771ffaf5a4a94f6a6d70f75a1a91963d52b3f701170110da9e38", 0x38}, {&(0x7f0000000dc0)="4755771d0dbd4c7683852cf58bfe80a80c4fc4302d0fea876f840e293bf89b1d844c84222379f2247281bee1b9c76a192542ac4512d429a71f9c993af0bf97187887292320d0e984b255e4e544e372c555390a338345fdaf47", 0x59}, {&(0x7f0000000e40)="087ce8c8fb551d0e5c50380ec45e7782d33ae7f9f2298f280ee6ab046a352a5aad3e85685f3bc38c048ba99711c83392f4cdabe781ec9a3978aa503ba6511c385303334887659b240cf54f56f14181b2b2bf5ebdf639f393d090a0e31bb8a24bd730650337ce52bf5b1c2a1238798412e155a462dff78192ea93e68be0aaafcd827c74545d8ec1273d2692245f2f13fd7b53c9", 0x93}], 0x6, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @op={0x18}], 0x1060, 0x1}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002000)="2f61f5e83970b48eae1cfe9c27b5ed9148461fc0ad1f5f2ea96748c2d8538b8acd8f0dd4b6ba980091f6c8f9604067d6c126794ba00409ef21e460c9c17c1c2136b37256d6dbae2ed32440ac50d2f242aa007e87580ec93ba726de0633a1c8b4aa7743e121faea12c4e27fed0b893be8be105134e7aece2bf475ed937092c76e155918d3f2a8e2a72427830d592d689eb8d39f3448e05119d2d8a72fe82c78abd198b1", 0xa3}, {&(0x7f00000020c0)="4089430d7e3d2dd8af6e4a427258d84994caf97edac111fb47f10b20d9487c45e653caa0bf3f39966ba8f07f8beeb274f3bb9b83ab19b91a7c8f8b06efaf01666f79e2384af772037a512149a351352e9f225980dc2722929831d693ed8492980f77879a4179363e4c4453ac5bef2aca0d1a0ba117864e99fe7c6c3a6284f872f9f621181d974f133b1a5ecce8183f0576bea154f0efd421b9f7962c1276c1117731", 0xa2}, {&(0x7f0000002180)="1d57bd086042e5853a6c61a19c93a783071a2f8fd55380709221cf2173c76d7fdea55ae735d18884cde885cf9c30eaf36b6da1ec841de2530a0a6d139029f4112993a2bbb9d445acc4cf5d9135fc8f374cc368c94a856deb9bf45a6fbe16cb1208ade809a5ca6a685f194d86bf9ed0e3544990addaa8833c823aec4dc4f98d1a5a1ba4dea35e0eb20af3541b4207d40a40a7953691a68d38570d3506dbcb3d9aeb54fd447242ab3b7e13097a79006cdb0e73c9f3ebbb70827a60dc95343e941343d2284721ed58d2d46122ddcad6025a058a7e1eb44a42e3077f", 0xda}, {&(0x7f0000002280)="f1b31358643baac5135beaf2920e5913535c777c2c7a5a10625076f124222fdbb7be87663fde82633727081f22c45038b34d40b069096137c237cebeaa21", 0x3e}, {&(0x7f00000022c0)="9144abbd07c1d81b73401eb281fdcbdb102f573231e5b4c4de5d3b8881866192f9e453abd578adaa962ef40f135c357489bdd2a5b0c3f16c469c82a07e8b65593c3b881eb5aa734b04f443a9bd9517e5f4d245a9769cb31d0d4c8959045f4ba21ebeeedd85786cebf9b7243008184239e7218aece313f3fc77e2a4b2d6fc3f698be1646d0f34ee6445c181385e4ed8b3736d8218cca9150af3a909205392bd867faa09e723373d2e2dc85bc3f4a78eb21955253f191a5242", 0xb8}, {&(0x7f0000002380)="194776a86a9641939cf5260f34d630957b722b00c19dcdcd72e0cb36cc020aeb5802883c4b9d54ea80a7cb7b5a06a1ab20c444895b94e5aaf8d81059f624ac9ab8313cd8d2f5c676efb64eb4e41d", 0x4e}], 0x6, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x60, 0x117, 0x2, 0x46, "bb842d127df83991ab781fe4f9a87e6b6d4c4381adf79d40fe3f27b582e8b97564cc0ed9bd0df0068745e8864fa7158fad1106d7f18108e4411a8a691e0cdd4456b8ad8afef4"}, @iv={0x30, 0x117, 0x2, 0x16, "12cb315d8464d377a091ab6d3ca1db340f28a0903695"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x138, 0x40400c0}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000025c0)="52c257a713318d6ad3f49995fddfc16baf034711b9a11ccc7371ca1dbc7961f4d195a2348a7e7c75d6e929d287cc9c6d2d3eca814df63e5b8921cbb6520ee107801df4d27b89a927acc7b373939441323c5886ecdc800188b6f8831d6fd7b7d33ff9fdb1c8f80dbd96fb12db2ca66800000000", 0x73}, {&(0x7f0000002640)="af05277cceef819789fc6f8b48ebbecb7c5b76d4f8c57eaf93f79f1bbf70daf7e53de82897f8c80335e2dd2fb4", 0x2d}, {&(0x7f0000002680)="35c600101ff0e5d33da5b02c29d391d2b05088015e7985a67135da489710970c6db4bc05a885466f4c9add63b5958a32891be934000877b42c7d3313d6ee790dcaf41db566f1990a2ed52bdc2f8ca965340a29f75a77aba5bd50938b7271c00259750c259007d58f80ccfcabc7b7f3b54f4b59b1791201e9d8798fe00c5f53f2883e576055dd11b9f04398846b9e74f3095ed944f85dc1eb125dee669c195a016aacdea1ee74cc5c018b11a17087900208543094ebeab1c1b4b43743f63044ab9c729517d0ee923cc453161255343e66a81cc097461b1d9f6f285da01893eeb7cb7cd29a5c9a254e9993e8c88dd0270969d146f67bc441d8b5", 0xf9}, {&(0x7f0000002780)="df04f9358bcbe7e100a751be28e27d9661f12e91eefc3cefc76da5caf1649e38e465cf82a2c8e3ccbde2a79823696e6bf40f307b0515332773f5c8c71d43371d62f5bd3fb572d45f99cc165172396d399a1bd6ff5c7209ac6377f771fbb0de101e4aabb6427961e1a4e575a0615466a656a3cf44662cedacb63b7411315b010cd46747294bd877e97a83a85029dc3b2125a5a1893c98f48408f2c54a622cf599c877964394e202a57c52161d3bf313ca0eb97ffdc8e6c649c360e74ccf544e", 0xbf}, {&(0x7f0000002840)="b81e6cdb48c929e8ca732c64b87f54afd1617710e45f348d67f43095e8b946dfb2bbdb7f06e969cde8b90d9d662822668a2d13549e9d51afa807551ab0dd9b0859d1311699f96a0e4b2db435362c75d88717a56383bb21faa5028621f03a2c5d0409bde94d31fc32069c91150a0627da937e87ca45b2bc3f7a309493f4b756b2daadd77b", 0x84}], 0x5, 0x0, 0x0, 0x34}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002980)="a37d9e9a6c5761d04c335069229059140cc65c83289d494b3416acdc08e3af1d5b07ca7ac05b2a8be7d53b9dfdb7edb03cf922329631fdabc1ac0ebfb6a25e9ad144340c77f1f238d4cd5cef110f9eb26c7d5a4e5a75a1fcf4208e09252672dccb4ebed95d1d28f7d46dce7e853ccebbd873d40b575099ef6719ccff15203c39076ac68dc2db2ad2a2ecbc44c4dfa8a25a9fcf70393d45465838c91a5458bbd3bc19b4c4fe462bb9fa17fc0303427c68f4d9f1f68c111d0ca99266bb21642c0a622561aa84e41bd0ffe2ec792d5cba83248a3a7a54a9b43669569d33456e6bc3ad267e80944c19d275c5eeb6", 0xec}, {&(0x7f0000002a80)="925ffb5964a14ce28d14c37d5c81877ebc437e1d7265", 0x16}, {&(0x7f0000002ac0)="5990627c3efc8872786f657f9b14a81ff92eb1e6ca13bfeb0209034c4a9543133c98b5e5c16eb232bf24eb9738a202c3af5143a7910de769b6522c49a58bfac4c904e32c21ac5f9e4f441894a6440843aa0e3a968a2ce69e0fde8706b1d26c13f8a4ff9e2770d2291e45b09f7e4293c85928d475d5290b1322056081c293c5ab20c31ad9d47d686584e0e2af0845847bfb7f27de69698031dff29353792b0290a8842e63e3cbefff689e1c5a40515d48f4ee2ac612bcc17a30daa03bbaedf86adcfde1cf04a51d4a77", 0xc9}], 0x3, 0x0, 0x0, 0x1}], 0x6, 0x20040010) (async) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async) getpid() (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x81, 0x0, 0x0, 0x200, r2}) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/26) (async) 00:17:06 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_RMID(r0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x1) getpid() shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) shmctl$IPC_RMID(r0, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x1) (async) getpid() (async) 00:17:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:06 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:06 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) (async) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) (async) 00:17:06 executing program 2: shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) (async) 00:17:06 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:06 executing program 4: setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000c1) 00:17:06 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000004000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/88) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000003000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x1000) 00:17:06 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:06 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:06 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 1289.525501] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:06 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:06 executing program 4: setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000c1) 00:17:06 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000004000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/88) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000003000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x1000) 00:17:06 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:06 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:06 executing program 4: setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000c1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) (async) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000c1) (async) [ 1289.637666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:06 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:06 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:06 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000004000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/88) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000003000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x1000) 00:17:06 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:06 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x24}}, 0x40000) 00:17:06 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/20) r1 = shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/43) 00:17:06 executing program 5: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 00:17:06 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:06 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/132) 00:17:06 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x24}}, 0x40000) [ 1289.824960] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:06 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/20) r1 = shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/43) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/20) (async) shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (async) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/43) (async) 00:17:06 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) socket$inet6_udp(0xa, 0x2, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:06 executing program 5: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 00:17:07 executing program 0: r0 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)={0x5c, 0x7d, 0x2, {{0x0, 0x3e, 0x5c, 0x400, {0x0, 0x2, 0x5}, 0x3100000, 0x401, 0x6, 0x944, 0x1, '-', 0x9, 'nl802154\x00', 0x0, '', 0x1, '\''}, 0x9, 'nl802154\x00', r0, 0xee00, r0}}, 0x5c) setfsuid(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:17:07 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/20) (async) r1 = shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/43) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/132) 00:17:07 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x24}}, 0x40000) 00:17:07 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:07 executing program 5: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 00:17:07 executing program 0: r0 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)={0x5c, 0x7d, 0x2, {{0x0, 0x3e, 0x5c, 0x400, {0x0, 0x2, 0x5}, 0x3100000, 0x401, 0x6, 0x944, 0x1, '-', 0x9, 'nl802154\x00', 0x0, '', 0x1, '\''}, 0x9, 'nl802154\x00', r0, 0xee00, r0}}, 0x5c) setfsuid(r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:17:07 executing program 3: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000200)) r0 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='syz', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/!!^%\x00', r1) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x200c0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000300)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x2877, {0x2}, 0x4, 0x0, 0x0, 0x9, 0xe29, 0x1, 0x8, 0xc4a, 0x8f, 0x2000000000000000, 0xff, 0x3, 0x5, 0x8000000000000000, 0xca2, 0x800, 0x6, 0x10000}}, 0xa0) r3 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "df0e6db82caf53168d3740b46cca19b2af8a87e04e8cfa516e4fd3c49263f99cdff07679d6b44f536a57cb4d40783c353c1c150397a70e3f48c71cf04669e5ea", 0x33}, 0x48, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3) write$9p(0xffffffffffffffff, &(0x7f0000000240)="3ab812b50fd0e7340d8eea23f3fb88d9aa231a151053030c96aee6eed3e43ba6f25b7798870827b1edcfc5658bae130320a006c9ce322779e9f56254a99c4cffb8c2476b5ca3204435c240", 0x4b) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/132) 00:17:07 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x100280, 0x4) 00:17:07 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/135) 00:17:07 executing program 0: r0 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)={0x5c, 0x7d, 0x2, {{0x0, 0x3e, 0x5c, 0x400, {0x0, 0x2, 0x5}, 0x3100000, 0x401, 0x6, 0x944, 0x1, '-', 0x9, 'nl802154\x00', 0x0, '', 0x1, '\''}, 0x9, 'nl802154\x00', r0, 0xee00, r0}}, 0x5c) (async) setfsuid(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:17:07 executing program 3: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000200)) r0 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='syz', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/!!^%\x00', r1) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x200c0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000300)) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x2877, {0x2}, 0x4, 0x0, 0x0, 0x9, 0xe29, 0x1, 0x8, 0xc4a, 0x8f, 0x2000000000000000, 0xff, 0x3, 0x5, 0x8000000000000000, 0xca2, 0x800, 0x6, 0x10000}}, 0xa0) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "df0e6db82caf53168d3740b46cca19b2af8a87e04e8cfa516e4fd3c49263f99cdff07679d6b44f536a57cb4d40783c353c1c150397a70e3f48c71cf04669e5ea", 0x33}, 0x48, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3) write$9p(0xffffffffffffffff, &(0x7f0000000240)="3ab812b50fd0e7340d8eea23f3fb88d9aa231a151053030c96aee6eed3e43ba6f25b7798870827b1edcfc5658bae130320a006c9ce322779e9f56254a99c4cffb8c2476b5ca3204435c240", 0x4b) 00:17:07 executing program 4: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) 00:17:07 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x100280, 0x4) 00:17:07 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x4000, 0x180, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) 00:17:07 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x4) 00:17:07 executing program 4: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) (async, rerun: 32) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) (async, rerun: 32) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) 00:17:07 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x100280, 0x4) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 3: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000200)) (async) r0 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='syz', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/!!^%\x00', r1) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x200c0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000300)) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x2877, {0x2}, 0x4, 0x0, 0x0, 0x9, 0xe29, 0x1, 0x8, 0xc4a, 0x8f, 0x2000000000000000, 0xff, 0x3, 0x5, 0x8000000000000000, 0xca2, 0x800, 0x6, 0x10000}}, 0xa0) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "df0e6db82caf53168d3740b46cca19b2af8a87e04e8cfa516e4fd3c49263f99cdff07679d6b44f536a57cb4d40783c353c1c150397a70e3f48c71cf04669e5ea", 0x33}, 0x48, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3) (async) write$9p(0xffffffffffffffff, &(0x7f0000000240)="3ab812b50fd0e7340d8eea23f3fb88d9aa231a151053030c96aee6eed3e43ba6f25b7798870827b1edcfc5658bae130320a006c9ce322779e9f56254a99c4cffb8c2476b5ca3204435c240", 0x4b) 00:17:07 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x4) 00:17:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1000, 0x10000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 00:17:07 executing program 4: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) (async) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) (async) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) (async) 00:17:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x800001, 0x0, 0x80000001}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x4) 00:17:07 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 00:17:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async, rerun: 32) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1000, 0x10000) (rerun: 32) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 00:17:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x800001, 0x0, 0x80000001}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x800001, 0x0, 0x80000001}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/220) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 00:17:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1000, 0x10000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) (async, rerun: 64) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (rerun: 64) 00:17:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x800001, 0x0, 0x80000001}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/220) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:07 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xb2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x811}, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/220) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/220) (async) 00:17:07 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) 00:17:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) 00:17:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xb2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:07 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)) (async) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) 00:17:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) (async) write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) 00:17:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xb2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x811}, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:07 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 64) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (rerun: 64) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) (async, rerun: 64) write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) (rerun: 64) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x3000) r3 = getpgid(0xffffffffffffffff) r4 = geteuid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, r4, 0xffffffffffffffff, 0x160, 0x6b}, 0x6b8f, 0x4000009, 0x28, 0x100, 0xffffffffffffffff, r3, 0x2}) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000140)=""/4096) 00:17:07 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/212) 00:17:07 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) 00:17:07 executing program 5: r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:07 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x3000) r3 = getpgid(0xffffffffffffffff) r4 = geteuid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, r4, 0xffffffffffffffff, 0x160, 0x6b}, 0x6b8f, 0x4000009, 0x28, 0x100, 0xffffffffffffffff, r3, 0x2}) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) (async) r5 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000140)=""/4096) 00:17:08 executing program 5: r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:08 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/212) 00:17:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd25, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x400a0c1}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:08 executing program 5: r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:08 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x3000) (async) r3 = getpgid(0xffffffffffffffff) (async) r4 = geteuid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, r4, 0xffffffffffffffff, 0x160, 0x6b}, 0x6b8f, 0x4000009, 0x28, 0x100, 0xffffffffffffffff, r3, 0x2}) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000140)=""/4096) 00:17:08 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x8}, 0x6) write$P9_RLERROR(r0, &(0x7f0000000000)={0x10, 0x7, 0x1, {0x7, '({/[^#\\'}}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:08 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/212) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/212) (async) 00:17:08 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd25, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x400a0c1}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd25, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x400a0c1}, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:08 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)=""/83) 00:17:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:08 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:08 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000780)=0x2) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x60940) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x400) ioctl$BLKRRPART(r1, 0x125f, 0x0) r3 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000000c0)=""/126) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x6a000, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000300)={'syz1\x00', {0xd6df, 0x4, 0x401, 0x8}, 0x36, [0x800, 0x10001, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0xf9c, 0x5, 0x7, 0xa13d, 0x4, 0x1000, 0x2, 0x20, 0x4, 0x4, 0x7, 0x3, 0xfffffffd, 0x4, 0x0, 0x0, 0x3f, 0x5, 0x7ff, 0xc21, 0x1, 0xffff, 0x1f, 0x90000000, 0x7, 0x1, 0x20, 0x4, 0x1, 0x9, 0xb0, 0x671, 0x200, 0x3, 0x1000, 0xde, 0xae, 0x1, 0x76ea98d2, 0x7, 0x6, 0x0, 0xe4, 0x9, 0x20, 0x0, 0x0, 0x7, 0x2, 0x7f, 0x400, 0x7fff, 0x101, 0x0, 0x7, 0x7, 0x7fff, 0x5b07], [0x6, 0x1683, 0xd3, 0x8, 0x5, 0x3419, 0xb0, 0x2df, 0x8, 0xff, 0xffffff00, 0x9c0, 0x12, 0x6, 0x7, 0x1f, 0x0, 0x2, 0x2, 0x8, 0xffffff00, 0x7f, 0x7, 0x8, 0x9, 0x77, 0x7fff, 0x81, 0xfff, 0x520, 0x8, 0x7ff, 0x0, 0x8, 0x1f, 0x10000, 0x7, 0xfffffff7, 0x7fffffff, 0x3, 0x6, 0x2, 0x1, 0x2a0, 0x4, 0x4, 0x1, 0x20, 0x4, 0x1ff, 0x3, 0x2, 0x3c, 0x0, 0x3, 0x9, 0x556, 0x3c, 0x2, 0x1, 0x5, 0x5d0d, 0x7, 0x9], [0xff, 0x5, 0x2000000, 0x2d9, 0x9, 0x1, 0x4, 0xffffffcb, 0x345, 0x4, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x8000, 0x2, 0x1ff, 0x4, 0x1000, 0xfffffffa, 0x3, 0xb3, 0x86a0, 0x3, 0x80, 0x400, 0x582, 0x0, 0xfff, 0x8, 0x3, 0xe9, 0x746, 0x4, 0x9, 0xfffffffa, 0x10000, 0x1, 0x8, 0x3ff, 0xffffff81, 0x7ff, 0x1, 0x2, 0xbf9, 0x52ff, 0x1f, 0x8, 0x6, 0x1, 0x8, 0xfffffffe, 0x1, 0xaec3, 0x0, 0x1, 0x6, 0x6, 0xc531, 0xa248, 0x0, 0x1], [0x14, 0x8, 0x4, 0x9, 0xfffffffd, 0x100, 0x8001, 0x1, 0x4cc, 0x1ff, 0x8, 0x0, 0x0, 0x200000, 0xf97, 0x7, 0x3, 0x6, 0x8, 0x74, 0xab, 0xa82, 0x8001, 0x5cba, 0x10001, 0x3e0, 0xe5, 0x400, 0x2, 0x924, 0x400, 0x7, 0xfffff000, 0x80000000, 0x40, 0x851f, 0x7, 0xffff, 0x400, 0xabd, 0x6, 0x9, 0x7, 0x8, 0x7fff, 0x6, 0x80000001, 0x0, 0xb7, 0x67a, 0x4, 0x7, 0x3f, 0x7, 0x7, 0x2, 0x3, 0x8, 0x101, 0xffffffff, 0x200, 0xba2, 0x6, 0x101]}, 0x45c) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x4000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xffffffffffffffff) 00:17:08 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)=""/83) 00:17:08 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x8}, 0x6) write$P9_RLERROR(r0, &(0x7f0000000000)={0x10, 0x7, 0x1, {0x7, '({/[^#\\'}}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) pipe2$9p(&(0x7f0000000080), 0x44800) (async) pipe2$9p(&(0x7f0000000280), 0x4000) (async) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) (async) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x8}, 0x6) (async) write$P9_RLERROR(r0, &(0x7f0000000000)={0x10, 0x7, 0x1, {0x7, '({/[^#\\'}}, 0x10) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd25, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x400a0c1}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:08 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000780)=0x2) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x60940) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x400) ioctl$BLKRRPART(r1, 0x125f, 0x0) r3 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000000c0)=""/126) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x6a000, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000300)={'syz1\x00', {0xd6df, 0x4, 0x401, 0x8}, 0x36, [0x800, 0x10001, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0xf9c, 0x5, 0x7, 0xa13d, 0x4, 0x1000, 0x2, 0x20, 0x4, 0x4, 0x7, 0x3, 0xfffffffd, 0x4, 0x0, 0x0, 0x3f, 0x5, 0x7ff, 0xc21, 0x1, 0xffff, 0x1f, 0x90000000, 0x7, 0x1, 0x20, 0x4, 0x1, 0x9, 0xb0, 0x671, 0x200, 0x3, 0x1000, 0xde, 0xae, 0x1, 0x76ea98d2, 0x7, 0x6, 0x0, 0xe4, 0x9, 0x20, 0x0, 0x0, 0x7, 0x2, 0x7f, 0x400, 0x7fff, 0x101, 0x0, 0x7, 0x7, 0x7fff, 0x5b07], [0x6, 0x1683, 0xd3, 0x8, 0x5, 0x3419, 0xb0, 0x2df, 0x8, 0xff, 0xffffff00, 0x9c0, 0x12, 0x6, 0x7, 0x1f, 0x0, 0x2, 0x2, 0x8, 0xffffff00, 0x7f, 0x7, 0x8, 0x9, 0x77, 0x7fff, 0x81, 0xfff, 0x520, 0x8, 0x7ff, 0x0, 0x8, 0x1f, 0x10000, 0x7, 0xfffffff7, 0x7fffffff, 0x3, 0x6, 0x2, 0x1, 0x2a0, 0x4, 0x4, 0x1, 0x20, 0x4, 0x1ff, 0x3, 0x2, 0x3c, 0x0, 0x3, 0x9, 0x556, 0x3c, 0x2, 0x1, 0x5, 0x5d0d, 0x7, 0x9], [0xff, 0x5, 0x2000000, 0x2d9, 0x9, 0x1, 0x4, 0xffffffcb, 0x345, 0x4, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x8000, 0x2, 0x1ff, 0x4, 0x1000, 0xfffffffa, 0x3, 0xb3, 0x86a0, 0x3, 0x80, 0x400, 0x582, 0x0, 0xfff, 0x8, 0x3, 0xe9, 0x746, 0x4, 0x9, 0xfffffffa, 0x10000, 0x1, 0x8, 0x3ff, 0xffffff81, 0x7ff, 0x1, 0x2, 0xbf9, 0x52ff, 0x1f, 0x8, 0x6, 0x1, 0x8, 0xfffffffe, 0x1, 0xaec3, 0x0, 0x1, 0x6, 0x6, 0xc531, 0xa248, 0x0, 0x1], [0x14, 0x8, 0x4, 0x9, 0xfffffffd, 0x100, 0x8001, 0x1, 0x4cc, 0x1ff, 0x8, 0x0, 0x0, 0x200000, 0xf97, 0x7, 0x3, 0x6, 0x8, 0x74, 0xab, 0xa82, 0x8001, 0x5cba, 0x10001, 0x3e0, 0xe5, 0x400, 0x2, 0x924, 0x400, 0x7, 0xfffff000, 0x80000000, 0x40, 0x851f, 0x7, 0xffff, 0x400, 0xabd, 0x6, 0x9, 0x7, 0x8, 0x7fff, 0x6, 0x80000001, 0x0, 0xb7, 0x67a, 0x4, 0x7, 0x3f, 0x7, 0x7, 0x2, 0x3, 0x8, 0x101, 0xffffffff, 0x200, 0xba2, 0x6, 0x101]}, 0x45c) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x4000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000780)=0x2) (async) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x60940) (async) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x400) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) (async) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000000c0)=""/126) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x6a000, 0x0) (async) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) (async) write$uinput_user_dev(r5, &(0x7f0000000300)={'syz1\x00', {0xd6df, 0x4, 0x401, 0x8}, 0x36, [0x800, 0x10001, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0xf9c, 0x5, 0x7, 0xa13d, 0x4, 0x1000, 0x2, 0x20, 0x4, 0x4, 0x7, 0x3, 0xfffffffd, 0x4, 0x0, 0x0, 0x3f, 0x5, 0x7ff, 0xc21, 0x1, 0xffff, 0x1f, 0x90000000, 0x7, 0x1, 0x20, 0x4, 0x1, 0x9, 0xb0, 0x671, 0x200, 0x3, 0x1000, 0xde, 0xae, 0x1, 0x76ea98d2, 0x7, 0x6, 0x0, 0xe4, 0x9, 0x20, 0x0, 0x0, 0x7, 0x2, 0x7f, 0x400, 0x7fff, 0x101, 0x0, 0x7, 0x7, 0x7fff, 0x5b07], [0x6, 0x1683, 0xd3, 0x8, 0x5, 0x3419, 0xb0, 0x2df, 0x8, 0xff, 0xffffff00, 0x9c0, 0x12, 0x6, 0x7, 0x1f, 0x0, 0x2, 0x2, 0x8, 0xffffff00, 0x7f, 0x7, 0x8, 0x9, 0x77, 0x7fff, 0x81, 0xfff, 0x520, 0x8, 0x7ff, 0x0, 0x8, 0x1f, 0x10000, 0x7, 0xfffffff7, 0x7fffffff, 0x3, 0x6, 0x2, 0x1, 0x2a0, 0x4, 0x4, 0x1, 0x20, 0x4, 0x1ff, 0x3, 0x2, 0x3c, 0x0, 0x3, 0x9, 0x556, 0x3c, 0x2, 0x1, 0x5, 0x5d0d, 0x7, 0x9], [0xff, 0x5, 0x2000000, 0x2d9, 0x9, 0x1, 0x4, 0xffffffcb, 0x345, 0x4, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x8000, 0x2, 0x1ff, 0x4, 0x1000, 0xfffffffa, 0x3, 0xb3, 0x86a0, 0x3, 0x80, 0x400, 0x582, 0x0, 0xfff, 0x8, 0x3, 0xe9, 0x746, 0x4, 0x9, 0xfffffffa, 0x10000, 0x1, 0x8, 0x3ff, 0xffffff81, 0x7ff, 0x1, 0x2, 0xbf9, 0x52ff, 0x1f, 0x8, 0x6, 0x1, 0x8, 0xfffffffe, 0x1, 0xaec3, 0x0, 0x1, 0x6, 0x6, 0xc531, 0xa248, 0x0, 0x1], [0x14, 0x8, 0x4, 0x9, 0xfffffffd, 0x100, 0x8001, 0x1, 0x4cc, 0x1ff, 0x8, 0x0, 0x0, 0x200000, 0xf97, 0x7, 0x3, 0x6, 0x8, 0x74, 0xab, 0xa82, 0x8001, 0x5cba, 0x10001, 0x3e0, 0xe5, 0x400, 0x2, 0x924, 0x400, 0x7, 0xfffff000, 0x80000000, 0x40, 0x851f, 0x7, 0xffff, 0x400, 0xabd, 0x6, 0x9, 0x7, 0x8, 0x7fff, 0x6, 0x80000001, 0x0, 0xb7, 0x67a, 0x4, 0x7, 0x3f, 0x7, 0x7, 0x2, 0x3, 0x8, 0x101, 0xffffffff, 0x200, 0xba2, 0x6, 0x101]}, 0x45c) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r6, 0xb) (async) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x4000) (async) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xffffffffffffffff) (async) 00:17:08 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:08 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/34) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 00:17:08 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)=""/83) 00:17:09 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) (async) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x8}, 0x6) (async) write$P9_RLERROR(r0, &(0x7f0000000000)={0x10, 0x7, 0x1, {0x7, '({/[^#\\'}}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) geteuid() r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:09 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000780)=0x2) (async) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x60940) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x400) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) r3 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000000c0)=""/126) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) (async) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x6a000, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280)) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000300)={'syz1\x00', {0xd6df, 0x4, 0x401, 0x8}, 0x36, [0x800, 0x10001, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0xf9c, 0x5, 0x7, 0xa13d, 0x4, 0x1000, 0x2, 0x20, 0x4, 0x4, 0x7, 0x3, 0xfffffffd, 0x4, 0x0, 0x0, 0x3f, 0x5, 0x7ff, 0xc21, 0x1, 0xffff, 0x1f, 0x90000000, 0x7, 0x1, 0x20, 0x4, 0x1, 0x9, 0xb0, 0x671, 0x200, 0x3, 0x1000, 0xde, 0xae, 0x1, 0x76ea98d2, 0x7, 0x6, 0x0, 0xe4, 0x9, 0x20, 0x0, 0x0, 0x7, 0x2, 0x7f, 0x400, 0x7fff, 0x101, 0x0, 0x7, 0x7, 0x7fff, 0x5b07], [0x6, 0x1683, 0xd3, 0x8, 0x5, 0x3419, 0xb0, 0x2df, 0x8, 0xff, 0xffffff00, 0x9c0, 0x12, 0x6, 0x7, 0x1f, 0x0, 0x2, 0x2, 0x8, 0xffffff00, 0x7f, 0x7, 0x8, 0x9, 0x77, 0x7fff, 0x81, 0xfff, 0x520, 0x8, 0x7ff, 0x0, 0x8, 0x1f, 0x10000, 0x7, 0xfffffff7, 0x7fffffff, 0x3, 0x6, 0x2, 0x1, 0x2a0, 0x4, 0x4, 0x1, 0x20, 0x4, 0x1ff, 0x3, 0x2, 0x3c, 0x0, 0x3, 0x9, 0x556, 0x3c, 0x2, 0x1, 0x5, 0x5d0d, 0x7, 0x9], [0xff, 0x5, 0x2000000, 0x2d9, 0x9, 0x1, 0x4, 0xffffffcb, 0x345, 0x4, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x8000, 0x2, 0x1ff, 0x4, 0x1000, 0xfffffffa, 0x3, 0xb3, 0x86a0, 0x3, 0x80, 0x400, 0x582, 0x0, 0xfff, 0x8, 0x3, 0xe9, 0x746, 0x4, 0x9, 0xfffffffa, 0x10000, 0x1, 0x8, 0x3ff, 0xffffff81, 0x7ff, 0x1, 0x2, 0xbf9, 0x52ff, 0x1f, 0x8, 0x6, 0x1, 0x8, 0xfffffffe, 0x1, 0xaec3, 0x0, 0x1, 0x6, 0x6, 0xc531, 0xa248, 0x0, 0x1], [0x14, 0x8, 0x4, 0x9, 0xfffffffd, 0x100, 0x8001, 0x1, 0x4cc, 0x1ff, 0x8, 0x0, 0x0, 0x200000, 0xf97, 0x7, 0x3, 0x6, 0x8, 0x74, 0xab, 0xa82, 0x8001, 0x5cba, 0x10001, 0x3e0, 0xe5, 0x400, 0x2, 0x924, 0x400, 0x7, 0xfffff000, 0x80000000, 0x40, 0x851f, 0x7, 0xffff, 0x400, 0xabd, 0x6, 0x9, 0x7, 0x8, 0x7fff, 0x6, 0x80000001, 0x0, 0xb7, 0x67a, 0x4, 0x7, 0x3f, 0x7, 0x7, 0x2, 0x3, 0x8, 0x101, 0xffffffff, 0x200, 0xba2, 0x6, 0x101]}, 0x45c) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r6, 0xb) (async) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x4000) (async) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xffffffffffffffff) 00:17:09 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/34) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:09 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/140) 00:17:09 executing program 4: r0 = getpid() getpgid(r0) ptrace$getenv(0x4201, r0, 0xfffffffffffffffd, &(0x7f0000000000)) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:09 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/34) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 00:17:09 executing program 2: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) geteuid() (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:09 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/140) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:09 executing program 4: r0 = getpid() getpgid(r0) (async) ptrace$getenv(0x4201, r0, 0xfffffffffffffffd, &(0x7f0000000000)) (async) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) (async, rerun: 32) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (rerun: 32) 00:17:09 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) geteuid() r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) geteuid() (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:09 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/140) 00:17:09 executing program 2: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 00:17:09 executing program 4: r0 = getpid() getpgid(r0) (async) ptrace$getenv(0x4201, r0, 0xfffffffffffffffd, &(0x7f0000000000)) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:09 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:17:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:chfn_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000900)=""/4096) 00:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 00:17:09 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:chfn_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000900)=""/4096) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:chfn_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) (async) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000900)=""/4096) (async) 00:17:09 executing program 4: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x2}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 00:17:09 executing program 2: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) (async, rerun: 32) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (rerun: 32) 00:17:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x131) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 00:17:09 executing program 2: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffb000/0x2000)=nil) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x7) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 00:17:09 executing program 4: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x2}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 32) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) (rerun: 32) 00:17:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x131) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x131) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:chfn_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) (async) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000900)=""/4096) 00:17:09 executing program 2: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) (async) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffb000/0x2000)=nil) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x7) (async) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 00:17:09 executing program 4: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x2}) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 00:17:09 executing program 0: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/152, 0x98) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB='G'], 0x24}}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 00:17:09 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 00:17:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x131) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:09 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/32) 00:17:09 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/41) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/217) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/206) 00:17:09 executing program 2: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) (async) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffb000/0x2000)=nil) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x7) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 00:17:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:17:09 executing program 0: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/152, 0x98) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB='G'], 0x24}}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 00:17:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x1ff, 0xdb, "09fae0753c89338960f6ec39aac25924c1e401bfeff0c3de1295a0eac9cf6d8cc7986a5b3e7b17cd351b3295837a85b7489b2871e7ed371f85b07658330621b9bf15e68f2d1c3d75df2611d08d1a8759644269b9075d16c15559946af2df386bc827e2f0544dda3204a22f6670fe89b86096c4d61ce44ca444c5dccdfb185d43e82214417c06c7f440aceb1bbd45e24d8bd2dbd0c5017383dc84b90ab2bcc60d74f323109376893123090ba0193a59cc0cb3dddea53233f8575b35a6c243a28678330d6be2c0879480bedbd5b55435ec4e83d61ec4cc9c8500af32533513d259454234bfcfb453b66051468aee2c046e9368807db283010fcbc74bb7912a5f0d", 0x1, 0x9, 0x80, 0x0, 0x6, 0x4, 0x3f}, r1}}, 0x120) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:10 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/32) 00:17:10 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/41) (async) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/217) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/206) 00:17:10 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget(0x3, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff5000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000200)=""/32) r2 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/222) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000000)=""/250) 00:17:10 executing program 5: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/152, 0x98) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB='G'], 0x24}}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 00:17:10 executing program 0: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/152, 0x98) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB='G'], 0x24}}, 0x0) (async) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 00:17:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x1ff, 0xdb, "09fae0753c89338960f6ec39aac25924c1e401bfeff0c3de1295a0eac9cf6d8cc7986a5b3e7b17cd351b3295837a85b7489b2871e7ed371f85b07658330621b9bf15e68f2d1c3d75df2611d08d1a8759644269b9075d16c15559946af2df386bc827e2f0544dda3204a22f6670fe89b86096c4d61ce44ca444c5dccdfb185d43e82214417c06c7f440aceb1bbd45e24d8bd2dbd0c5017383dc84b90ab2bcc60d74f323109376893123090ba0193a59cc0cb3dddea53233f8575b35a6c243a28678330d6be2c0879480bedbd5b55435ec4e83d61ec4cc9c8500af32533513d259454234bfcfb453b66051468aee2c046e9368807db283010fcbc74bb7912a5f0d", 0x1, 0x9, 0x80, 0x0, 0x6, 0x4, 0x3f}, r1}}, 0x120) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:10 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/32) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/32) (async) 00:17:10 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/41) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/217) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/206) 00:17:10 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x3, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff5000/0x2000)=nil) (async) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000200)=""/32) (async, rerun: 64) r2 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ff6000/0x4000)=nil) (rerun: 64) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/222) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async, rerun: 64) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000000)=""/250) (rerun: 64) 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB="086a044a4057656657661ce8f75697a5f288cbcf8eef8f72c118e4ee528df670ecb905de085baef3e53cf93519b2650f0109dfdd0000000000000000"], 0x24}}, 0x0) 00:17:10 executing program 3: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:10 executing program 5: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget(0x3, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff5000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000200)=""/32) r2 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/222) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000000)=""/250) 00:17:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x1ff, 0xdb, "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", 0x1, 0x9, 0x80, 0x0, 0x6, 0x4, 0x3f}, r1}}, 0x120) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x1ff, 0xdb, "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", 0x1, 0x9, 0x80, 0x0, 0x6, 0x4, 0x3f}, r1}}, 0x120) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:10 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x3, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff5000/0x2000)=nil) (async) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000200)=""/32) (async) r2 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/222) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000000)=""/250) 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB="086a044a4057656657661ce8f75697a5f288cbcf8eef8f72c118e4ee528df670ecb905de085baef3e53cf93519b2650f0109dfdd0000000000000000"], 0x24}}, 0x0) 00:17:10 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_RMID(r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40891}, 0x20008000) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x50}}, 0x40) 00:17:10 executing program 3: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_RMID(r0, 0x0) (async) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) (async) 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:10 executing program 1: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0xffffffb0, 0x4) 00:17:10 executing program 2: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) 00:17:10 executing program 3: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:10 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_RMID(r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40891}, 0x20008000) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x50}}, 0x40) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) shmctl$IPC_RMID(r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40891}, 0x20008000) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x50}}, 0x40) (async) [ 1293.325927] nla_parse: 13 callbacks suppressed [ 1293.325934] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB="086a044a4057656657661ce8f75697a5f288cbcf8eef8f72c118e4ee528df670ecb905de085baef3e53cf93519b2650f0109dfdd0000000000000000"], 0x24}}, 0x0) 00:17:10 executing program 1: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0xffffffb0, 0x4) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) (async) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0xffffffb0, 0x4) (async) 00:17:10 executing program 2: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_LOCK(r0, 0xb) (async) 00:17:10 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) shmctl$IPC_RMID(r0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40891}, 0x20008000) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x50}}, 0x40) 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:10 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/17) 00:17:10 executing program 2: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_LOCK(r0, 0xb) 00:17:10 executing program 1: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) (async) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0xffffffb0, 0x4) [ 1293.499817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8080) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB='\b', @ANYRESHEX=r2], 0x24}}, 0x0) 00:17:10 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/17) 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) 00:17:10 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}}}, 0x30) 00:17:10 executing program 2: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8080) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB='\b', @ANYRESHEX=r2], 0x24}}, 0x0) 00:17:10 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/17) 00:17:10 executing program 2: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) 00:17:10 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}}}, 0x30) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$UI_ABS_SETUP(r0, 0x40045566, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}}}, 0x30) (async) 00:17:10 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/17) 00:17:10 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/17) 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8080) (async) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB='\b', @ANYRESHEX=r2], 0x24}}, 0x0) 00:17:10 executing program 2: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) (async) 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) 00:17:10 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/17) 00:17:10 executing program 3: r0 = shmget(0x2, 0x3000, 0x410, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/12) 00:17:10 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}}}, 0x30) 00:17:10 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:10 executing program 3: r0 = shmget(0x2, 0x3000, 0x410, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/12) 00:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00ed487fcb4e22edc88b5b4420fb93a90eabfc1ece84f3af3b9f747abac955638d7d5faad1f86a7d7a7a866dcc3fd8d1404ce4d0ed7bb2612291f230fbf36228297548b0c4b53acd01f86258d3a22e70fcd019c0e584be5dfcf041d69094540235551d4ead2a0d5ee6fee03132a58cd941408daba2639df04602e5f74fa117d548f78b607b1b175d51c167b1a3f75b5332bfa73897e32a37db91cf78a8b66036c492602dd62a2c5b424bc9000000000000", @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x3, 0x4) write$uinput_user_dev(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r4, r5}}, 0x18) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x6, 0x20, 0x38, 0x7}, 'syz1\x00', 0x38}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000480)={'syz1\x00', {0x100, 0x9305, 0x400, 0x61e}, 0x16, [0x4, 0x8ab, 0x80000001, 0x8000, 0x1000, 0x7, 0x5, 0x3, 0x8001, 0x2, 0x8, 0x400, 0xf2a, 0x7f, 0xff800000, 0x400, 0x0, 0x9, 0xfc, 0x7, 0x80000001, 0x8, 0x3b1, 0x6, 0x8, 0x20, 0x6, 0x4, 0x14, 0x7, 0xffff, 0xf43, 0x9, 0x5, 0x2e02, 0x82e, 0xffffffff, 0x1, 0x3, 0x1a8, 0xffff8001, 0x37fd, 0x7fff, 0x0, 0x8, 0x3, 0xffffff80, 0x80, 0x1, 0x473, 0x8, 0x7, 0x527, 0x6, 0x0, 0x0, 0x1ff, 0x3, 0x1000, 0x1, 0xffffff95, 0x2, 0xa, 0x7], [0xff, 0xbce9, 0x67, 0x80000000, 0x4, 0x7fff, 0x7, 0x9, 0x0, 0x1ff, 0x5, 0x0, 0xaba, 0x1800, 0x401, 0xfffffffd, 0x40, 0xf40, 0x5, 0x8, 0x3, 0x57e, 0x800, 0x7, 0x300, 0x2, 0x3ff, 0x6, 0x5, 0x4, 0x7, 0x8, 0x491, 0x2b02, 0x1f, 0x7, 0xe098, 0x8, 0x8, 0x685, 0x1ff, 0x5, 0x4, 0xfffffffe, 0x9, 0x100, 0x800, 0x4b8, 0x5, 0x3, 0x800, 0x1, 0x7, 0x7f, 0x84a9, 0xffffffff, 0x3ff, 0x5, 0xffffff01, 0x7, 0x7fff, 0xfffff455, 0x1, 0x3], [0x8, 0x80, 0x7fc090, 0xffff, 0x1, 0x8000, 0xfffffffa, 0x5, 0xa1ec, 0x6, 0x2, 0x7ff, 0x3, 0x200, 0x2, 0x400, 0x1, 0x10000, 0x20, 0x5b5, 0xffffffff, 0x0, 0xffffff47, 0x4, 0x6, 0xc12, 0x6, 0x1, 0x84, 0x1000, 0x7, 0x8, 0x6, 0xfffffff8, 0x9, 0x1f, 0xccd, 0x200, 0x1f, 0x7, 0x1, 0x4, 0x4, 0x2, 0xfff, 0x7, 0x3, 0x0, 0x5, 0xd797, 0x10001, 0x9, 0xff, 0x5, 0x380, 0x4, 0x400, 0x3f, 0x30c, 0x7fffffff, 0x1, 0x20, 0xff], [0x7, 0xda7, 0x6, 0x7, 0x87be, 0x0, 0x7fffffff, 0x3, 0x3, 0x20, 0x8001, 0x0, 0x3d2, 0x3, 0x401, 0x200000, 0xf51, 0xf7, 0x9, 0x800, 0x0, 0x8, 0x6, 0x1000, 0x400, 0x93bc, 0xffffff6f, 0x751, 0x5, 0x1f, 0xdd, 0x0, 0x8, 0x0, 0x8d, 0x6, 0x4, 0x2, 0xffffffff, 0x10000, 0xa91, 0x7, 0x545, 0xf0, 0x3, 0x8001, 0xfffff673, 0x5, 0xfffffe00, 0xb7b, 0x401, 0x39f85675, 0x6e, 0x9, 0x4, 0xfff, 0x80000001, 0x2, 0x3, 0x0, 0x34b, 0x80000002, 0xfd5, 0x1]}, 0x45c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x5000240) r6 = accept4$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@null, @rose, @netrom, @netrom, @rose, @bcast, @rose, @rose]}, &(0x7f00000001c0)=0x48, 0x40800) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000200)=0x82, &(0x7f0000000240)=0x4) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000280)={0x42, 0xfffffff8, 0x1}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) 00:17:10 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x61a083, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x9}, 0x2) 00:17:10 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) r1 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x401}, 0x6, 0xb071, 0x0, 0x80000000, 0xffffffffffffffff, 0x0, 0xfffe}) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, r1, r2, r1, r3, 0xa, 0x2bc}, 0x24, 0x0, 0x100000001, 0x3, r4, 0x0, 0x7f}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00ed487fcb4e22edc88b5b4420fb93a90eabfc1ece84f3af3b9f747abac955638d7d5faad1f86a7d7a7a866dcc3fd8d1404ce4d0ed7bb2612291f230fbf36228297548b0c4b53acd01f86258d3a22e70fcd019c0e584be5dfcf041d69094540235551d4ead2a0d5ee6fee03132a58cd941408daba2639df04602e5f74fa117d548f78b607b1b175d51c167b1a3f75b5332bfa73897e32a37db91cf78a8b66036c492602dd62a2c5b424bc9000000000000", @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x61a083, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x9}, 0x2) 00:17:11 executing program 3: r0 = shmget(0x2, 0x3000, 0x410, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/12) shmget(0x2, 0x3000, 0x410, &(0x7f0000ffc000/0x3000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/12) (async) 00:17:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x3, 0x4) (async, rerun: 64) write$uinput_user_dev(r0, 0x0, 0x0) (rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r4, r5}}, 0x18) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x6, 0x20, 0x38, 0x7}, 'syz1\x00', 0x38}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000480)={'syz1\x00', {0x100, 0x9305, 0x400, 0x61e}, 0x16, [0x4, 0x8ab, 0x80000001, 0x8000, 0x1000, 0x7, 0x5, 0x3, 0x8001, 0x2, 0x8, 0x400, 0xf2a, 0x7f, 0xff800000, 0x400, 0x0, 0x9, 0xfc, 0x7, 0x80000001, 0x8, 0x3b1, 0x6, 0x8, 0x20, 0x6, 0x4, 0x14, 0x7, 0xffff, 0xf43, 0x9, 0x5, 0x2e02, 0x82e, 0xffffffff, 0x1, 0x3, 0x1a8, 0xffff8001, 0x37fd, 0x7fff, 0x0, 0x8, 0x3, 0xffffff80, 0x80, 0x1, 0x473, 0x8, 0x7, 0x527, 0x6, 0x0, 0x0, 0x1ff, 0x3, 0x1000, 0x1, 0xffffff95, 0x2, 0xa, 0x7], [0xff, 0xbce9, 0x67, 0x80000000, 0x4, 0x7fff, 0x7, 0x9, 0x0, 0x1ff, 0x5, 0x0, 0xaba, 0x1800, 0x401, 0xfffffffd, 0x40, 0xf40, 0x5, 0x8, 0x3, 0x57e, 0x800, 0x7, 0x300, 0x2, 0x3ff, 0x6, 0x5, 0x4, 0x7, 0x8, 0x491, 0x2b02, 0x1f, 0x7, 0xe098, 0x8, 0x8, 0x685, 0x1ff, 0x5, 0x4, 0xfffffffe, 0x9, 0x100, 0x800, 0x4b8, 0x5, 0x3, 0x800, 0x1, 0x7, 0x7f, 0x84a9, 0xffffffff, 0x3ff, 0x5, 0xffffff01, 0x7, 0x7fff, 0xfffff455, 0x1, 0x3], [0x8, 0x80, 0x7fc090, 0xffff, 0x1, 0x8000, 0xfffffffa, 0x5, 0xa1ec, 0x6, 0x2, 0x7ff, 0x3, 0x200, 0x2, 0x400, 0x1, 0x10000, 0x20, 0x5b5, 0xffffffff, 0x0, 0xffffff47, 0x4, 0x6, 0xc12, 0x6, 0x1, 0x84, 0x1000, 0x7, 0x8, 0x6, 0xfffffff8, 0x9, 0x1f, 0xccd, 0x200, 0x1f, 0x7, 0x1, 0x4, 0x4, 0x2, 0xfff, 0x7, 0x3, 0x0, 0x5, 0xd797, 0x10001, 0x9, 0xff, 0x5, 0x380, 0x4, 0x400, 0x3f, 0x30c, 0x7fffffff, 0x1, 0x20, 0xff], [0x7, 0xda7, 0x6, 0x7, 0x87be, 0x0, 0x7fffffff, 0x3, 0x3, 0x20, 0x8001, 0x0, 0x3d2, 0x3, 0x401, 0x200000, 0xf51, 0xf7, 0x9, 0x800, 0x0, 0x8, 0x6, 0x1000, 0x400, 0x93bc, 0xffffff6f, 0x751, 0x5, 0x1f, 0xdd, 0x0, 0x8, 0x0, 0x8d, 0x6, 0x4, 0x2, 0xffffffff, 0x10000, 0xa91, 0x7, 0x545, 0xf0, 0x3, 0x8001, 0xfffff673, 0x5, 0xfffffe00, 0xb7b, 0x401, 0x39f85675, 0x6e, 0x9, 0x4, 0xfff, 0x80000001, 0x2, 0x3, 0x0, 0x34b, 0x80000002, 0xfd5, 0x1]}, 0x45c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x5000240) (async) r6 = accept4$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@null, @rose, @netrom, @netrom, @rose, @bcast, @rose, @rose]}, &(0x7f00000001c0)=0x48, 0x40800) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000200)=0x82, &(0x7f0000000240)=0x4) (async) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000280)={0x42, 0xfffffff8, 0x1}) (async) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) r1 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x401}, 0x6, 0xb071, 0x0, 0x80000000, 0xffffffffffffffff, 0x0, 0xfffe}) (async) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async, rerun: 64) r4 = getpid() (rerun: 64) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, r1, r2, r1, r3, 0xa, 0x2bc}, 0x24, 0x0, 0x100000001, 0x3, r4, 0x0, 0x7f}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:11 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x61a083, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x9}, 0x2) 00:17:11 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000001300)={0x8, 0x120, 0xfa00, {0x4, {0x100, 0x4, "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", 0x0, 0x80, 0xff, 0xfd, 0xff, 0x7, 0xd5}}}, 0x128) r0 = shmget(0x1, 0xc000, 0x1, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x6000) r1 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000300)=""/4096) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000100)=""/187) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000240)=""/131) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00ed487fcb4e22edc88b5b4420fb93a90eabfc1ece84f3af3b9f747abac955638d7d5faad1f86a7d7a7a866dcc3fd8d1404ce4d0ed7bb2612291f230fbf36228297548b0c4b53acd01f86258d3a22e70fcd019c0e584be5dfcf041d69094540235551d4ead2a0d5ee6fee03132a58cd941408daba2639df04602e5f74fa117d548f78b607b1b175d51c167b1a3f75b5332bfa73897e32a37db91cf78a8b66036c492602dd62a2c5b424bc9000000000000", @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00ed487fcb4e22edc88b5b4420fb93a90eabfc1ece84f3af3b9f747abac955638d7d5faad1f86a7d7a7a866dcc3fd8d1404ce4d0ed7bb2612291f230fbf36228297548b0c4b53acd01f86258d3a22e70fcd019c0e584be5dfcf041d69094540235551d4ead2a0d5ee6fee03132a58cd941408daba2639df04602e5f74fa117d548f78b607b1b175d51c167b1a3f75b5332bfa73897e32a37db91cf78a8b66036c492602dd62a2c5b424bc9000000000000", @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x3, 0x4) write$uinput_user_dev(r0, 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r4, r5}}, 0x18) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x6, 0x20, 0x38, 0x7}, 'syz1\x00', 0x38}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000480)={'syz1\x00', {0x100, 0x9305, 0x400, 0x61e}, 0x16, [0x4, 0x8ab, 0x80000001, 0x8000, 0x1000, 0x7, 0x5, 0x3, 0x8001, 0x2, 0x8, 0x400, 0xf2a, 0x7f, 0xff800000, 0x400, 0x0, 0x9, 0xfc, 0x7, 0x80000001, 0x8, 0x3b1, 0x6, 0x8, 0x20, 0x6, 0x4, 0x14, 0x7, 0xffff, 0xf43, 0x9, 0x5, 0x2e02, 0x82e, 0xffffffff, 0x1, 0x3, 0x1a8, 0xffff8001, 0x37fd, 0x7fff, 0x0, 0x8, 0x3, 0xffffff80, 0x80, 0x1, 0x473, 0x8, 0x7, 0x527, 0x6, 0x0, 0x0, 0x1ff, 0x3, 0x1000, 0x1, 0xffffff95, 0x2, 0xa, 0x7], [0xff, 0xbce9, 0x67, 0x80000000, 0x4, 0x7fff, 0x7, 0x9, 0x0, 0x1ff, 0x5, 0x0, 0xaba, 0x1800, 0x401, 0xfffffffd, 0x40, 0xf40, 0x5, 0x8, 0x3, 0x57e, 0x800, 0x7, 0x300, 0x2, 0x3ff, 0x6, 0x5, 0x4, 0x7, 0x8, 0x491, 0x2b02, 0x1f, 0x7, 0xe098, 0x8, 0x8, 0x685, 0x1ff, 0x5, 0x4, 0xfffffffe, 0x9, 0x100, 0x800, 0x4b8, 0x5, 0x3, 0x800, 0x1, 0x7, 0x7f, 0x84a9, 0xffffffff, 0x3ff, 0x5, 0xffffff01, 0x7, 0x7fff, 0xfffff455, 0x1, 0x3], [0x8, 0x80, 0x7fc090, 0xffff, 0x1, 0x8000, 0xfffffffa, 0x5, 0xa1ec, 0x6, 0x2, 0x7ff, 0x3, 0x200, 0x2, 0x400, 0x1, 0x10000, 0x20, 0x5b5, 0xffffffff, 0x0, 0xffffff47, 0x4, 0x6, 0xc12, 0x6, 0x1, 0x84, 0x1000, 0x7, 0x8, 0x6, 0xfffffff8, 0x9, 0x1f, 0xccd, 0x200, 0x1f, 0x7, 0x1, 0x4, 0x4, 0x2, 0xfff, 0x7, 0x3, 0x0, 0x5, 0xd797, 0x10001, 0x9, 0xff, 0x5, 0x380, 0x4, 0x400, 0x3f, 0x30c, 0x7fffffff, 0x1, 0x20, 0xff], [0x7, 0xda7, 0x6, 0x7, 0x87be, 0x0, 0x7fffffff, 0x3, 0x3, 0x20, 0x8001, 0x0, 0x3d2, 0x3, 0x401, 0x200000, 0xf51, 0xf7, 0x9, 0x800, 0x0, 0x8, 0x6, 0x1000, 0x400, 0x93bc, 0xffffff6f, 0x751, 0x5, 0x1f, 0xdd, 0x0, 0x8, 0x0, 0x8d, 0x6, 0x4, 0x2, 0xffffffff, 0x10000, 0xa91, 0x7, 0x545, 0xf0, 0x3, 0x8001, 0xfffff673, 0x5, 0xfffffe00, 0xb7b, 0x401, 0x39f85675, 0x6e, 0x9, 0x4, 0xfff, 0x80000001, 0x2, 0x3, 0x0, 0x34b, 0x80000002, 0xfd5, 0x1]}, 0x45c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x5000240) (async) r6 = accept4$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@null, @rose, @netrom, @netrom, @rose, @bcast, @rose, @rose]}, &(0x7f00000001c0)=0x48, 0x40800) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000200)=0x82, &(0x7f0000000240)=0x4) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000280)={0x42, 0xfffffff8, 0x1}) (async) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) 00:17:11 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="79cd02000004", @ANYRES32, @ANYBLOB="af82d8c49d2213e25638e5deaae77008"], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="002159286f699b3171d4339dc5d47201ff007e18bd9c9d3c1f25"], 0x14}}, 0x0) 00:17:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) r1 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x401}, 0x6, 0xb071, 0x0, 0x80000000, 0xffffffffffffffff, 0x0, 0xfffe}) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, r1, r2, r1, r3, 0xa, 0x2bc}, 0x24, 0x0, 0x100000001, 0x3, r4, 0x0, 0x7f}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) (async) geteuid() (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x401}, 0x6, 0xb071, 0x0, 0x80000000, 0xffffffffffffffff, 0x0, 0xfffe}) (async) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) getpid() (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, r1, r2, r1, r3, 0xa, 0x2bc}, 0x24, 0x0, 0x100000001, 0x3, r4, 0x0, 0x7f}) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:11 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000001300)={0x8, 0x120, 0xfa00, {0x4, {0x100, 0x4, "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", 0x0, 0x80, 0xff, 0xfd, 0xff, 0x7, 0xd5}}}, 0x128) r0 = shmget(0x1, 0xc000, 0x1, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) (async) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x6000) r1 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000300)=""/4096) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000100)=""/187) (async) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000240)=""/131) 00:17:11 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9ecbc00bb017efeb}, 0x24000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) 00:17:11 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000001300)={0x8, 0x120, 0xfa00, {0x4, {0x100, 0x4, "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", 0x0, 0x80, 0xff, 0xfd, 0xff, 0x7, 0xd5}}}, 0x128) r0 = shmget(0x1, 0xc000, 0x1, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) (async) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x6000) (async) r1 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000300)=""/4096) (async) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000100)=""/187) (async) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000240)=""/131) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="79cd02000004", @ANYRES32, @ANYBLOB="af82d8c49d2213e25638e5deaae77008"], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="002159286f699b3171d4339dc5d47201ff007e18bd9c9d3c1f25"], 0x14}}, 0x0) 00:17:11 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9ecbc00bb017efeb}, 0x24000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9ecbc00bb017efeb}, 0x24000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) (async) 00:17:11 executing program 4: shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="79cd02000004", @ANYRES32, @ANYBLOB="af82d8c49d2213e25638e5deaae77008"], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="002159286f699b3171d4339dc5d47201ff007e18bd9c9d3c1f25"], 0x14}}, 0x0) 00:17:11 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/159) 00:17:11 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9ecbc00bb017efeb}, 0x24000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9ecbc00bb017efeb}, 0x24000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) (async) 00:17:11 executing program 4: shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) 00:17:11 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001874, &(0x7f0000ff8000/0x4000)=nil) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff9000/0x3000)=nil) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = getpid() r5 = getpid() getpgid(r5) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x1, 0x0, r2, 0xee00, r3, 0x180, 0xb59}, 0x188a741d, 0x81, 0x1, 0x6, r4, r5, 0x90}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x182, 0x8000}, 0x7f, 0x1, 0x800, 0x3}) 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/159) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001810000930100eb25ef36295821323b38b09bac1aa3cd0eb77229afcbaffc8421498c42dffa8a0ba612192672243440ff028affe58c0cd6cca799b9207ee288"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004841}, 0x8090) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) 00:17:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x3, {"9e50e6000556b6cc9935e7a3fa35de7e"}, 0x0, 0x100000001, 0x5}, @ib={0x1b, 0x3, 0x80, {"e49dc09cb58e3a8cf02f959dba2961c7"}, 0xfffffffffffffc01, 0x1e7470d1, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r2, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7b73, 0x2, "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", 0x9, 0xfb, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, r5}}, 0x128) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2, 0x6}}, 0xfffffffffffffc98) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:11 executing program 4: shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) 00:17:11 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001874, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 64) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff9000/0x3000)=nil) (async, rerun: 64) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 64) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async, rerun: 64) r4 = getpid() (async) r5 = getpid() getpgid(r5) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x1, 0x0, r2, 0xee00, r3, 0x180, 0xb59}, 0x188a741d, 0x81, 0x1, 0x6, r4, r5, 0x90}) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x182, 0x8000}, 0x7f, 0x1, 0x800, 0x3}) 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001810000930100eb25ef36295821323b38b09bac1aa3cd0eb77229afcbaffc8421498c42dffa8a0ba612192672243440ff028affe58c0cd6cca799b9207ee288"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004841}, 0x8090) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) 00:17:11 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/159) [ 1294.598841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x3, {"9e50e6000556b6cc9935e7a3fa35de7e"}, 0x0, 0x100000001, 0x5}, @ib={0x1b, 0x3, 0x80, {"e49dc09cb58e3a8cf02f959dba2961c7"}, 0xfffffffffffffc01, 0x1e7470d1, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r2, 0x7}}, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7b73, 0x2, "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", 0x9, 0xfb, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, r5}}, 0x128) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, 0x0, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2, 0x6}}, 0xfffffffffffffc98) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:11 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffa000/0x1000)=nil) 00:17:11 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001874, &(0x7f0000ff8000/0x4000)=nil) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff9000/0x3000)=nil) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = getpid() r5 = getpid() getpgid(r5) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x1, 0x0, r2, 0xee00, r3, 0x180, 0xb59}, 0x188a741d, 0x81, 0x1, 0x6, r4, r5, 0x90}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x182, 0x8000}, 0x7f, 0x1, 0x800, 0x3}) shmget$private(0x0, 0x4000, 0x78001874, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff9000/0x3000)=nil) (async) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) getpid() (async) getpid() (async) getpgid(r5) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x1, 0x0, r2, 0xee00, r3, 0x180, 0xb59}, 0x188a741d, 0x81, 0x1, 0x6, r4, r5, 0x90}) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x182, 0x8000}, 0x7f, 0x1, 0x800, 0x3}) (async) 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = getpid() r2 = getpgid(r1) r3 = getpid() getpgid(r3) process_vm_writev(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/210, 0xd2}], 0x3, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0x1c8, 0x7fff}, 0x4, 0xfffffffffffffff9, 0x1ff, 0x81, r1, r3, 0xffff}) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/184) 00:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001810000930100eb25ef36295821323b38b09bac1aa3cd0eb77229afcbaffc8421498c42dffa8a0ba612192672243440ff028affe58c0cd6cca799b9207ee288"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004841}, 0x8090) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001810000930100eb25ef36295821323b38b09bac1aa3cd0eb77229afcbaffc8421498c42dffa8a0ba612192672243440ff028affe58c0cd6cca799b9207ee288"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004841}, 0x8090) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) (async) 00:17:11 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffa000/0x1000)=nil) 00:17:11 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:11 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 64) r1 = getpid() (rerun: 64) r2 = getpgid(r1) (async) r3 = getpid() getpgid(r3) (async, rerun: 64) process_vm_writev(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/210, 0xd2}], 0x3, 0x0) (async, rerun: 64) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0x1c8, 0x7fff}, 0x4, 0xfffffffffffffff9, 0x1ff, 0x81, r1, r3, 0xffff}) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/184) 00:17:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xb0ad06379e95baed}, 0x24080001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x240000c0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:11 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffa000/0x1000)=nil) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) [ 1294.923103] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x3, {"9e50e6000556b6cc9935e7a3fa35de7e"}, 0x0, 0x100000001, 0x5}, @ib={0x1b, 0x3, 0x80, {"e49dc09cb58e3a8cf02f959dba2961c7"}, 0xfffffffffffffc01, 0x1e7470d1, 0x3}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r2, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7b73, 0x2, "afb5035d1263a33e278b7d674eca4972e7f76fbff5439fbd496914c75998b505456f70a6eb8a26f165b2db4439da723216769eac9a8e169ccc3163788b33b3792f603d25d564ed676fcffe4a2b8e1261f31ef6926ecbeb81aae7912790c3e4d5ed40378165d4503be7d254fd14c6a7a7ac099204f82b173906b6e766a8e57a7e408f1ee99a1812c08c916c1102f526bfcc1c316860b4114cb6010e37fab07dc2811bf3a3bf2ca1f63b2ed5a82d9aa92afa50d275d970f5ccccff968150122c934047afc009e414e38b95126623a1b1a2810b44a0760a8eb7d91756541b0911db95496519a55aff2a6884fe4514a11ba22b57ce4033923028df7a9177f8052708", 0x9, 0xfb, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, r5}}, 0x128) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, 0x0, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2, 0x6}}, 0xfffffffffffffc98) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:12 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = getpid() r2 = getpgid(r1) r3 = getpid() getpgid(r3) process_vm_writev(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/210, 0xd2}], 0x3, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0x1c8, 0x7fff}, 0x4, 0xfffffffffffffff9, 0x1ff, 0x81, r1, r3, 0xffff}) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/184) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) getpid() (async) getpgid(r1) (async) getpid() (async) getpgid(r3) (async) process_vm_writev(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/210, 0xd2}], 0x3, 0x0) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0x1c8, 0x7fff}, 0x4, 0xfffffffffffffff9, 0x1ff, 0x81, r1, r3, 0xffff}) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/184) (async) 00:17:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xb0ad06379e95baed}, 0x24080001) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x240000c0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0xc000) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r6) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r8, 0x820, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) 00:17:12 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) r1 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000000)={0x5b, 0x7d, 0x1, {{0x0, 0x41, 0x40, 0x699, {0x4, 0x2, 0x4}, 0x110000, 0x0, 0x1ff, 0x9, 0x1, ',', 0x3, '%/,', 0x1, ')', 0x9, ')[\'/%\xfc\'\'%'}, 0x5, '$\\{,}', r1, 0xee01, 0xffffffffffffffff}}, 0x5b) setfsuid(0xee00) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) [ 1295.160544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:12 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) r1 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000000)={0x5b, 0x7d, 0x1, {{0x0, 0x41, 0x40, 0x699, {0x4, 0x2, 0x4}, 0x110000, 0x0, 0x1ff, 0x9, 0x1, ',', 0x3, '%/,', 0x1, ')', 0x9, ')[\'/%\xfc\'\'%'}, 0x5, '$\\{,}', r1, 0xee01, 0xffffffffffffffff}}, 0x5b) setfsuid(0xee00) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) pipe2$9p(&(0x7f0000000280), 0x4000) (async) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) (async) geteuid() (async) write$P9_RSTATu(r0, &(0x7f0000000000)={0x5b, 0x7d, 0x1, {{0x0, 0x41, 0x40, 0x699, {0x4, 0x2, 0x4}, 0x110000, 0x0, 0x1ff, 0x9, 0x1, ',', 0x3, '%/,', 0x1, ')', 0x9, ')[\'/%\xfc\'\'%'}, 0x5, '$\\{,}', r1, 0xee01, 0xffffffffffffffff}}, 0x5b) (async) setfsuid(0xee00) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:12 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') accept4$netrom(r0, &(0x7f00000000c0)={{}, [@remote, @rose, @remote, @default, @bcast, @rose, @bcast]}, &(0x7f0000000080)=0x91, 0x800) 00:17:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r6) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r8, 0x820, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/20) r0 = shmget(0x3, 0x1000, 0x78000002, &(0x7f0000ffe000/0x1000)=nil) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="a53614c24bff4f009a9ec9b7e4a0873a0227853abc7e778281a7fcb158564bc4d0acb67b6744bc6c6c4f78d117ba70c48d935c6f07bf3546864bed78fd5b7ce0f901608b024246b09327d3f8a0de82a842dd860f10777506abfa61739f3fb05445e21c4db82e40e8718c0a93fe391fbab6caa143b0c5c72fa3e462349b976139171d27a0716ca555ef5b0c35320bca4ad81ec6ff7fc0f8f1dc73d8d35b", 0x9d, 0x8015, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:17:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/20) r0 = shmget(0x3, 0x1000, 0x78000002, &(0x7f0000ffe000/0x1000)=nil) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="a53614c24bff4f009a9ec9b7e4a0873a0227853abc7e778281a7fcb158564bc4d0acb67b6744bc6c6c4f78d117ba70c48d935c6f07bf3546864bed78fd5b7ce0f901608b024246b09327d3f8a0de82a842dd860f10777506abfa61739f3fb05445e21c4db82e40e8718c0a93fe391fbab6caa143b0c5c72fa3e462349b976139171d27a0716ca555ef5b0c35320bca4ad81ec6ff7fc0f8f1dc73d8d35b", 0x9d, 0x8015, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/20) (async) shmget(0x3, 0x1000, 0x78000002, &(0x7f0000ffe000/0x1000)=nil) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="a53614c24bff4f009a9ec9b7e4a0873a0227853abc7e778281a7fcb158564bc4d0acb67b6744bc6c6c4f78d117ba70c48d935c6f07bf3546864bed78fd5b7ce0f901608b024246b09327d3f8a0de82a842dd860f10777506abfa61739f3fb05445e21c4db82e40e8718c0a93fe391fbab6caa143b0c5c72fa3e462349b976139171d27a0716ca555ef5b0c35320bca4ad81ec6ff7fc0f8f1dc73d8d35b", 0x9d, 0x8015, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) 00:17:12 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) accept4$netrom(r0, &(0x7f00000000c0)={{}, [@remote, @rose, @remote, @default, @bcast, @rose, @bcast]}, &(0x7f0000000080)=0x91, 0x800) 00:17:12 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) (async) r1 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000000)={0x5b, 0x7d, 0x1, {{0x0, 0x41, 0x40, 0x699, {0x4, 0x2, 0x4}, 0x110000, 0x0, 0x1ff, 0x9, 0x1, ',', 0x3, '%/,', 0x1, ')', 0x9, ')[\'/%\xfc\'\'%'}, 0x5, '$\\{,}', r1, 0xee01, 0xffffffffffffffff}}, 0x5b) setfsuid(0xee00) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xb0ad06379e95baed}, 0x24080001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x240000c0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0xc000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/20) (async) r0 = shmget(0x3, 0x1000, 0x78000002, &(0x7f0000ffe000/0x1000)=nil) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="a53614c24bff4f009a9ec9b7e4a0873a0227853abc7e778281a7fcb158564bc4d0acb67b6744bc6c6c4f78d117ba70c48d935c6f07bf3546864bed78fd5b7ce0f901608b024246b09327d3f8a0de82a842dd860f10777506abfa61739f3fb05445e21c4db82e40e8718c0a93fe391fbab6caa143b0c5c72fa3e462349b976139171d27a0716ca555ef5b0c35320bca4ad81ec6ff7fc0f8f1dc73d8d35b", 0x9d, 0x8015, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:17:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r6) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r8, 0x820, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r6) (async) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r8, 0x820, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) (async) 00:17:12 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') accept4$netrom(r0, &(0x7f00000000c0)={{}, [@remote, @rose, @remote, @default, @bcast, @rose, @bcast]}, &(0x7f0000000080)=0x91, 0x800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) accept4$netrom(r0, &(0x7f00000000c0)={{}, [@remote, @rose, @remote, @default, @bcast, @rose, @bcast]}, &(0x7f0000000080)=0x91, 0x800) (async) 00:17:12 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/71) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) 00:17:12 executing program 2: shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) [ 1295.564132] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:12 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/71) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/71) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) (async) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:12 executing program 2: shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:12 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = gettid() r1 = gettid() ptrace$getenv(0x4201, r1, 0x7f, &(0x7f0000000100)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x73d0a690ffa4a0f9, 0x9}, 0x80, 0x4, 0x0, 0xab, 0xffffffffffffffff, r0, 0x40}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8}, 0x10) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:12 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/71) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) 00:17:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) 00:17:12 executing program 2: shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:12 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = gettid() r1 = gettid() ptrace$getenv(0x4201, r1, 0x7f, &(0x7f0000000100)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x73d0a690ffa4a0f9, 0x9}, 0x80, 0x4, 0x0, 0xab, 0xffffffffffffffff, r0, 0x40}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) gettid() (async) gettid() (async) ptrace$getenv(0x4201, r1, 0x7f, &(0x7f0000000100)) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x73d0a690ffa4a0f9, 0x9}, 0x80, 0x4, 0x0, 0xab, 0xffffffffffffffff, r0, 0x40}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8}, 0x10) (async) 00:17:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) socket$alg(0x26, 0x5, 0x0) (async) accept4$alg(r0, 0x0, 0x0, 0x80800) (async) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) 00:17:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000480), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000001000)=""/95) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/4096) 00:17:12 executing program 4: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc2a, 0x6, 0x3f, 0x9, 0xfffffffffffffffa}) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/33) [ 1295.802396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:12 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = gettid() r1 = gettid() ptrace$getenv(0x4201, r1, 0x7f, &(0x7f0000000100)) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x73d0a690ffa4a0f9, 0x9}, 0x80, 0x4, 0x0, 0xab, 0xffffffffffffffff, r0, 0x40}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8}, 0x10) 00:17:12 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) 00:17:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) (async) 00:17:12 executing program 4: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc2a, 0x6, 0x3f, 0x9, 0xfffffffffffffffa}) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/33) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc2a, 0x6, 0x3f, 0x9, 0xfffffffffffffffa}) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/33) (async) 00:17:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000480), r1, 0x0, 0x0, 0x1}}, 0x20) (async) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000001000)=""/95) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/4096) 00:17:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) socket$alg(0x26, 0x5, 0x0) (async) accept4$alg(r0, 0x0, 0x0, 0x80800) (async) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) 00:17:13 executing program 3: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/7) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000480), r1, 0x0, 0x0, 0x1}}, 0x20) (async) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000001000)=""/95) (async) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/4096) [ 1295.964870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:13 executing program 4: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc2a, 0x6, 0x3f, 0x9, 0xfffffffffffffffa}) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/33) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc2a, 0x6, 0x3f, 0x9, 0xfffffffffffffffa}) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/33) (async) 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) 00:17:13 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x0, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 3: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/7) 00:17:13 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:13 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getpid() getpgid(r1) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x26, 0x37, 0x1, {0x2, 0xbe, 0x80000000, r1, 0x8, '@/(#\xc0\'**'}}, 0x26) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0xa5619093ce4c6157, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x3b36}}, 0x10) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 00:17:13 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) [ 1296.124146] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:13 executing program 3: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/7) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x0, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x5bff12a2a050d8a6, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:13 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getpid() getpgid(r1) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x26, 0x37, 0x1, {0x2, 0xbe, 0x80000000, r1, 0x8, '@/(#\xc0\'**'}}, 0x26) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0xa5619093ce4c6157, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x3b36}}, 0x10) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) pipe2$9p(&(0x7f0000000100), 0x80000) (async) getpid() (async) getpgid(r1) (async) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x26, 0x37, 0x1, {0x2, 0xbe, 0x80000000, r1, 0x8, '@/(#\xc0\'**'}}, 0x26) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xa5619093ce4c6157, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x3b36}}, 0x10) (async) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) 00:17:13 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x0, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 3: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x7a}, 0xf) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/24) r0 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 00:17:13 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:13 executing program 1: shmget(0x3, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) r1 = geteuid() r2 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x1, r1, 0x0, 0x0, 0xffffffffffffffff, 0x65, 0x1}, 0x5, 0x7fff, 0xc7, 0x6, 0xffffffffffffffff, r2, 0x40}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/104) 00:17:13 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getpid() getpgid(r1) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x26, 0x37, 0x1, {0x2, 0xbe, 0x80000000, r1, 0x8, '@/(#\xc0\'**'}}, 0x26) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0xa5619093ce4c6157, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x3b36}}, 0x10) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) pipe2$9p(&(0x7f0000000100), 0x80000) (async) getpid() (async) getpgid(r1) (async) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x26, 0x37, 0x1, {0x2, 0xbe, 0x80000000, r1, 0x8, '@/(#\xc0\'**'}}, 0x26) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xa5619093ce4c6157, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x3b36}}, 0x10) (async) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 3: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x7a}, 0xf) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/24) r0 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x7a}, 0xf) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/24) (async) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) [ 1296.378596] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x5bff12a2a050d8a6, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) (async) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x5bff12a2a050d8a6, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) 00:17:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff8000/0x4000)=nil) 00:17:13 executing program 1: shmget(0x3, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) (async) r1 = geteuid() (async) r2 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x1, r1, 0x0, 0x0, 0xffffffffffffffff, 0x65, 0x1}, 0x5, 0x7fff, 0xc7, 0x6, 0xffffffffffffffff, r2, 0x40}) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) (async) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/104) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 3: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x7a}, 0xf) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/24) (async) r0 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x5bff12a2a050d8a6, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) (async) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x5bff12a2a050d8a6, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) (async) 00:17:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) (async) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff8000/0x4000)=nil) 00:17:13 executing program 1: shmget(0x3, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) (async) r1 = geteuid() (async) r2 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x1, r1, 0x0, 0x0, 0xffffffffffffffff, 0x65, 0x1}, 0x5, 0x7fff, 0xc7, 0x6, 0xffffffffffffffff, r2, 0x40}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) (async) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/104) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/24) 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x8000) 00:17:13 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) shmctl$SHM_LOCK(0x0, 0xb) 00:17:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7}, 0x7) (async) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff8000/0x4000)=nil) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) (async) 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x8000) (async) 00:17:13 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/24) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/24) (async) 00:17:13 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "28c32d1d56634e6c5bd7dd7704303651"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe24031398dbe7b75092a4d914944ece13b33a6939110612b087b72af8176687"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x4000884) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) 00:17:13 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/24) 00:17:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x8000) 00:17:13 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x6}, 0x1000}}, 0x18) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r1, 0xe}}, 0x10) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1}, 0x1000}}, 0x18) 00:17:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "28c32d1d56634e6c5bd7dd7704303651"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe24031398dbe7b75092a4d914944ece13b33a6939110612b087b72af8176687"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x4000884) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) 00:17:14 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) 00:17:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r1, 0xe}}, 0x10) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:14 executing program 3: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/234) r2 = geteuid() r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000200)=""/116) r4 = getpid() getpgid(r4) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0xee00, 0xee00, r2, 0xffffffffffffffff, 0x10, 0x120}, 0x6, 0x4, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0x800}) 00:17:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "28c32d1d56634e6c5bd7dd7704303651"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe24031398dbe7b75092a4d914944ece13b33a6939110612b087b72af8176687"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x4000884) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "28c32d1d56634e6c5bd7dd7704303651"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe24031398dbe7b75092a4d914944ece13b33a6939110612b087b72af8176687"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x4000884) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) (async) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1}, 0x1000}}, 0x18) 00:17:14 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/207) shmctl$IPC_RMID(0x0, 0x0) 00:17:14 executing program 3: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/234) (async) r2 = geteuid() (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000200)=""/116) (async) r4 = getpid() getpgid(r4) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0xee00, 0xee00, r2, 0xffffffffffffffff, 0x10, 0x120}, 0x6, 0x4, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0x800}) 00:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x22000000}, 0x1) 00:17:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r1, 0xe}}, 0x10) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1}, 0x1000}}, 0x18) 00:17:14 executing program 4: shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) 00:17:14 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/207) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/207) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 00:17:14 executing program 3: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/234) (async) r2 = geteuid() (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000200)=""/116) (async) r4 = getpid() getpgid(r4) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0xee00, 0xee00, r2, 0xffffffffffffffff, 0x10, 0x120}, 0x6, 0x4, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0x800}) 00:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x22000000}, 0x1) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}}}, 0x18) 00:17:14 executing program 4: shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) 00:17:14 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:14 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/15) 00:17:14 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/207) (async) shmctl$IPC_RMID(0x0, 0x0) 00:17:14 executing program 4: shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) (async) 00:17:14 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}}}, 0x18) 00:17:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r2 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xee00, 0xee00, r2, 0x0, 0x800}, 0x4, 0x9, 0x1ff, 0x3, 0x0, 0x0, 0xbd}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x2) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4}, 0x7ff}}, 0x18) 00:17:14 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/15) 00:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x22000000}, 0x1) 00:17:14 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:14 executing program 1: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/214) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}}}, 0x18) 00:17:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r2 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xee00, 0xee00, r2, 0x0, 0x800}, 0x4, 0x9, 0x1ff, 0x3, 0x0, 0x0, 0xbd}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x2) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4}, 0x7ff}}, 0x18) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) getegid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xee00, 0xee00, r2, 0x0, 0x800}, 0x4, 0x9, 0x1ff, 0x3, 0x0, 0x0, 0xbd}) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x2) (async) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4}, 0x7ff}}, 0x18) (async) 00:17:14 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/15) 00:17:14 executing program 1: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/214) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/214) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) (async) 00:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x10) 00:17:14 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) r3 = getegid() r4 = getpid() getpgid(r4) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xee01, 0x84, 0x8}, 0x14, 0x4, 0x400, 0xfffffffffffff800, 0xffffffffffffffff, r4, 0x4}) shmctl$SHM_LOCK(r0, 0xb) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}}}, 0x18) 00:17:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r2 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xee00, 0xee00, r2, 0x0, 0x800}, 0x4, 0x9, 0x1ff, 0x3, 0x0, 0x0, 0xbd}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x2) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4}, 0x7ff}}, 0x18) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) getegid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xee00, 0xee00, r2, 0x0, 0x800}, 0x4, 0x9, 0x1ff, 0x3, 0x0, 0x0, 0xbd}) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x2) (async) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4}, 0x7ff}}, 0x18) (async) 00:17:14 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/153) 00:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x10) 00:17:14 executing program 1: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/214) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/214) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) (async) 00:17:14 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) r3 = getegid() r4 = getpid() getpgid(r4) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xee01, 0x84, 0x8}, 0x14, 0x4, 0x400, 0xfffffffffffff800, 0xffffffffffffffff, r4, 0x4}) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80800) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) (async) getegid() (async) getpid() (async) getpgid(r4) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xee01, 0x84, 0x8}, 0x14, 0x4, 0x400, 0xfffffffffffff800, 0xffffffffffffffff, r4, 0x4}) (async) shmctl$SHM_LOCK(r0, 0xb) (async) 00:17:14 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1}, 0x1000}}, 0x18) 00:17:14 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) r3 = getegid() r4 = getpid() getpgid(r4) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xee01, 0x84, 0x8}, 0x14, 0x4, 0x400, 0xfffffffffffff800, 0xffffffffffffffff, r4, 0x4}) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80800) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) (async) getegid() (async) getpid() (async) getpgid(r4) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xee01, 0x84, 0x8}, 0x14, 0x4, 0x400, 0xfffffffffffff800, 0xffffffffffffffff, r4, 0x4}) (async) shmctl$SHM_LOCK(r0, 0xb) (async) 00:17:14 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 64) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000) (async, rerun: 64) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/153) 00:17:14 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) r2 = accept4$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @rose, @rose, @default]}, &(0x7f0000000100)=0x48, 0x80000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x3e) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) 00:17:14 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) shmctl$SHM_LOCK(0x0, 0xb) 00:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x10) (async) 00:17:14 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/213) r0 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x20, 0x3}, 0x81, 0x1, 0x7fffffff, 0x2562, 0x0, 0xffffffffffffffff, 0x2}) shmctl$IPC_RMID(r0, 0x0) 00:17:14 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) r2 = accept4$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @rose, @rose, @default]}, &(0x7f0000000100)=0x48, 0x80000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x3e) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) 00:17:15 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/1) 00:17:15 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) r2 = accept4$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @rose, @rose, @default]}, &(0x7f0000000100)=0x48, 0x80000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x3e) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="79b655b216c5ef01d459b845cd8800036bb38c6470ed629c12fe70045bd5c59d6917a53306000000000000005011a9841d6663e0e5bc876d34ab1b319ff1a4f128dffd28ce60820b9b6db18dfacbf8eb7af5d821ad1dc2185001dc52b33632e8ec574bd4913101a24a14f3d394a5350665b807ab669d9a53977e76c08e3cffdddb8e03fe4f71d807270f3a1707b60246f51669635d57e8a862d72215b8a061dcdae184eca6519117ace64f61fc4035e5f7dad2b4c70c3e6acc0ea3e3aea384904af54da45f65178fc942a37bcb5f49ade1b5d988ad9e45b6a8da8658d9dca7a2efbeb6d0ec601f5dbe624ea7fd5700"/252, @ANYRESHEX=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/153) 00:17:15 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/213) (async) r0 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x20, 0x3}, 0x81, 0x1, 0x7fffffff, 0x2562, 0x0, 0xffffffffffffffff, 0x2}) shmctl$IPC_RMID(r0, 0x0) 00:17:15 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) r2 = accept4$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @rose, @rose, @default]}, &(0x7f0000000100)=0x48, 0x80000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x3e) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) accept4$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @rose, @rose, @default]}, &(0x7f0000000100)=0x48, 0x80000) (async) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x3e) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) (async) 00:17:15 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/1) 00:17:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x8000) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) (async) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="79b655b216c5ef01d459b845cd8800036bb38c6470ed629c12fe70045bd5c59d6917a53306000000000000005011a9841d6663e0e5bc876d34ab1b319ff1a4f128dffd28ce60820b9b6db18dfacbf8eb7af5d821ad1dc2185001dc52b33632e8ec574bd4913101a24a14f3d394a5350665b807ab669d9a53977e76c08e3cffdddb8e03fe4f71d807270f3a1707b60246f51669635d57e8a862d72215b8a061dcdae184eca6519117ace64f61fc4035e5f7dad2b4c70c3e6acc0ea3e3aea384904af54da45f65178fc942a37bcb5f49ade1b5d988ad9e45b6a8da8658d9dca7a2efbeb6d0ec601f5dbe624ea7fd5700"/252, @ANYRESHEX=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/118) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000100)=""/84) 00:17:15 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/1) 00:17:15 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/213) r0 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x20, 0x3}, 0x81, 0x1, 0x7fffffff, 0x2562, 0x0, 0xffffffffffffffff, 0x2}) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/213) (async) shmget(0x1, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x20, 0x3}, 0x81, 0x1, 0x7fffffff, 0x2562, 0x0, 0xffffffffffffffff, 0x2}) (async) shmctl$IPC_RMID(r0, 0x0) (async) 00:17:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/118) (async) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000100)=""/84) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="79b655b216c5ef01d459b845cd8800036bb38c6470ed629c12fe70045bd5c59d6917a53306000000000000005011a9841d6663e0e5bc876d34ab1b319ff1a4f128dffd28ce60820b9b6db18dfacbf8eb7af5d821ad1dc2185001dc52b33632e8ec574bd4913101a24a14f3d394a5350665b807ab669d9a53977e76c08e3cffdddb8e03fe4f71d807270f3a1707b60246f51669635d57e8a862d72215b8a061dcdae184eca6519117ace64f61fc4035e5f7dad2b4c70c3e6acc0ea3e3aea384904af54da45f65178fc942a37bcb5f49ade1b5d988ad9e45b6a8da8658d9dca7a2efbeb6d0ec601f5dbe624ea7fd5700"/252, @ANYRESHEX=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x2000) 00:17:15 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) 00:17:15 executing program 5: shmget(0x3, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) r1 = geteuid() r2 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x1, r1, 0x0, 0x0, 0xffffffffffffffff, 0x65, 0x1}, 0x5, 0x7fff, 0xc7, 0x6, 0xffffffffffffffff, r2, 0x40}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/104) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYBLOB="29f51baa35567285ca27221533655f", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 32) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 32) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/118) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000100)=""/84) 00:17:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x2000) 00:17:15 executing program 5: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 00:17:15 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYBLOB="29f51baa35567285ca27221533655f", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (rerun: 64) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/76) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/48) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) 00:17:15 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getpid() getpgid(r1) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x26, 0x37, 0x1, {0x2, 0xbe, 0x80000000, r1, 0x8, '@/(#\xc0\'**'}}, 0x26) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0xa5619093ce4c6157, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x3b36}}, 0x10) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 00:17:15 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)) (async, rerun: 64) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) (rerun: 64) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/46) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/76) (async, rerun: 64) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 64) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/48) 00:17:15 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/20) r0 = shmget(0x3, 0x1000, 0x78000002, &(0x7f0000ffe000/0x1000)=nil) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="a53614c24bff4f009a9ec9b7e4a0873a0227853abc7e778281a7fcb158564bc4d0acb67b6744bc6c6c4f78d117ba70c48d935c6f07bf3546864bed78fd5b7ce0f901608b024246b09327d3f8a0de82a842dd860f10777506abfa61739f3fb05445e21c4db82e40e8718c0a93fe391fbab6caa143b0c5c72fa3e462349b976139171d27a0716ca555ef5b0c35320bca4ad81ec6ff7fc0f8f1dc73d8d35b", 0x9d, 0x8015, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) (rerun: 64) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/46) 00:17:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) (async) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x2000) 00:17:15 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/76) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/48) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYBLOB="29f51baa35567285ca27221533655f", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:15 executing program 5: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/46) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/46) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/46) (async) 00:17:15 executing program 1: r0 = gettid() ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) shmget(0x3, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget$private(0x0, 0xc000, 0x10, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/9) 00:17:15 executing program 1: r0 = gettid() ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$IPC_RMID(r1, 0x0) (async) shmget(0x3, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) r3 = shmget$private(0x0, 0xc000, 0x10, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/9) 00:17:15 executing program 5: r0 = gettid() ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) shmget(0x3, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget$private(0x0, 0xc000, 0x10, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/9) 00:17:15 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) 00:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20bdf9ca31ec3fb1ad560ab71fd07ce5329f18413606db6a0f36203206f97ea452d84470afe4146819c87e2ccaa156307fff651b647dc5a2da3e731a723626446f683a94d32b2c1848cde98844c461c7b9530ae52a299c34f558ce971c701bf96b55cd9609b1e2ea1aa10b5da83cdf5957db3e7ca4a85a93b17559af412fad2c92fe618b9eb5cb39cd47349349d3da1aa1a5e49ec405885b96f7a3a4b038c530f442126ba41ee4db10dcd640dd95ffe5678d898afa0a61e3e4a049", @ANYRES16=r1, @ANYBLOB="79cd88000300d12d3c5f4151027f1794ce430a4495bfd05a523159411f79424d6ee5473bb057492ccf87a7a4f1c1666531bdebf2b3cb0e021c8d260a14552ba102bee46ffd14a537370920f8755e2dd020aff861b0728783950e1d0559cd63585b95167859dae61cd7d03b2ff324cf000000000000", @ANYRESDEC=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:15 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r1, &(0x7f0000000040), 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:17:16 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x48a942, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x8}, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/19) 00:17:16 executing program 1: r0 = gettid() ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) (async) shmget(0x3, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget$private(0x0, 0xc000, 0x10, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/9) 00:17:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r6) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r8, 0x820, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) 00:17:16 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) 00:17:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20bdf9ca31ec3fb1ad560ab71fd07ce5329f18413606db6a0f36203206f97ea452d84470afe4146819c87e2ccaa156307fff651b647dc5a2da3e731a723626446f683a94d32b2c1848cde98844c461c7b9530ae52a299c34f558ce971c701bf96b55cd9609b1e2ea1aa10b5da83cdf5957db3e7ca4a85a93b17559af412fad2c92fe618b9eb5cb39cd47349349d3da1aa1a5e49ec405885b96f7a3a4b038c530f442126ba41ee4db10dcd640dd95ffe5678d898afa0a61e3e4a049", @ANYRES16=r1, @ANYBLOB="79cd88000300d12d3c5f4151027f1794ce430a4495bfd05a523159411f79424d6ee5473bb057492ccf87a7a4f1c1666531bdebf2b3cb0e021c8d260a14552ba102bee46ffd14a537370920f8755e2dd020aff861b0728783950e1d0559cd63585b95167859dae61cd7d03b2ff324cf000000000000", @ANYRESDEC=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:16 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x48a942, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x8}, 0x2) (async, rerun: 32) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/19) (rerun: 32) 00:17:16 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) [ 1299.067750] nla_parse: 6 callbacks suppressed [ 1299.067759] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 00:17:16 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) 00:17:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xb0ad06379e95baed}, 0x24080001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x240000c0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:16 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) (async) 00:17:16 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/48) 00:17:16 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r1, &(0x7f0000000040), 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) bind$bt_sco(r1, &(0x7f0000000040), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) 00:17:16 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x48a942, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x8}, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/19) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x48a942, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x8}, 0x2) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/19) (async) 00:17:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20bdf9ca31ec3fb1ad560ab71fd07ce5329f18413606db6a0f36203206f97ea452d84470afe4146819c87e2ccaa156307fff651b647dc5a2da3e731a723626446f683a94d32b2c1848cde98844c461c7b9530ae52a299c34f558ce971c701bf96b55cd9609b1e2ea1aa10b5da83cdf5957db3e7ca4a85a93b17559af412fad2c92fe618b9eb5cb39cd47349349d3da1aa1a5e49ec405885b96f7a3a4b038c530f442126ba41ee4db10dcd640dd95ffe5678d898afa0a61e3e4a049", @ANYRES16=r1, @ANYBLOB="79cd88000300d12d3c5f4151027f1794ce430a4495bfd05a523159411f79424d6ee5473bb057492ccf87a7a4f1c1666531bdebf2b3cb0e021c8d260a14552ba102bee46ffd14a537370920f8755e2dd020aff861b0728783950e1d0559cd63585b95167859dae61cd7d03b2ff324cf000000000000", @ANYRESDEC=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:16 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/48) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/48) (async) 00:17:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xb0ad06379e95baed}, 0x24080001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x240000c0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:16 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) 00:17:16 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:16 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/48) 00:17:17 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) (async) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xb0ad06379e95baed}, 0x24080001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x240000c0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:17 executing program 3: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 00:17:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:system_r:kernel_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2008c800}, 0x4000) 00:17:17 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) (async, rerun: 32) bind$bt_sco(r1, &(0x7f0000000040), 0x8) (rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:17:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80000003, &(0x7f0000000080)=0x4) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0xc06000) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x280000) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000001c0)) read$usbmon(r2, &(0x7f0000000100)=""/112, 0x70) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 00:17:17 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) (async) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:17 executing program 3: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) 00:17:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001810000930100eb25ef36295821323b38b09bac1aa3cd0eb77229afcbaffc8421498c42dffa8a0ba612192672243440ff028affe58c0cd6cca799b9207ee288"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004841}, 0x8090) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) [ 1300.090491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:17 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/175) 00:17:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:system_r:kernel_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2008c800}, 0x4000) 00:17:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80000003, &(0x7f0000000080)=0x4) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0xc06000) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x280000) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000001c0)) read$usbmon(r2, &(0x7f0000000100)=""/112, 0x70) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80000003, &(0x7f0000000080)=0x4) (async) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0xc06000) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x280000) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000001c0)) (async) read$usbmon(r2, &(0x7f0000000100)=""/112, 0x70) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) 00:17:17 executing program 3: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 00:17:17 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/175) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/175) (async) 00:17:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) (async) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x80000003, &(0x7f0000000080)=0x4) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0xc06000) (async, rerun: 64) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x280000) (async, rerun: 64) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000001c0)) (async) read$usbmon(r2, &(0x7f0000000100)=""/112, 0x70) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) [ 1300.229318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1300.265450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:17 executing program 5: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) 00:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:system_r:kernel_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2008c800}, 0x4000) 00:17:18 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/20) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x51c8) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r2, 0xa144) shmctl$SHM_LOCK(r1, 0xb) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/135) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000140)=""/142) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/152) 00:17:18 executing program 5: r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(r0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x6}, 0x1000}}, 0x18) 00:17:18 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/123) 00:17:18 executing program 4: r0 = geteuid() r1 = getegid() pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r2, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x1342, {0x20, 0x4, 0x3}, 0x11, r0, r1, 0x0, 0x1f, 0x10, 0xfa3, 0x1, 0x22, 0x0, 0x5, 0x101, 0x4, 0x2, 0x10000, 0x2, 0xfffffffffffffff8, 0x7}}, 0xa0) getegid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x1294, {0x20, 0x2, 0x8}, 0x84, r0, r1, 0x5b, 0x8000, 0x7, 0xb8b3, 0x4, 0xc4, 0x400, 0x1, 0x186c, 0x9, 0x0, 0x8, 0x8, 0x99ac, 0xbf8}}, 0xa0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/175) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)=""/175) (async) 00:17:18 executing program 4: r0 = geteuid() r1 = getegid() (async) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r2, &(0x7f00000002c0)={0x7}, 0x7) write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x1342, {0x20, 0x4, 0x3}, 0x11, r0, r1, 0x0, 0x1f, 0x10, 0xfa3, 0x1, 0x22, 0x0, 0x5, 0x101, 0x4, 0x2, 0x10000, 0x2, 0xfffffffffffffff8, 0x7}}, 0xa0) (async) getegid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x1294, {0x20, 0x2, 0x8}, 0x84, r0, r1, 0x5b, 0x8000, 0x7, 0xb8b3, 0x4, 0xc4, 0x400, 0x1, 0x186c, 0x9, 0x0, 0x8, 0x8, 0x99ac, 0xbf8}}, 0xa0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 1: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x4, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/123) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140)=0x400, &(0x7f0000000180)=0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xc00) 00:17:18 executing program 5: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/152, 0x98) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB='G'], 0x24}}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) [ 1301.043170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffd}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c041}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x68}, 0x1, 0x0, 0x0, 0xc2a8d0666622e12f}, 0x40045) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:18 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 32) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 32) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 64) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/123) (rerun: 64) 00:17:18 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/20) (async) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x51c8) (async) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r2, 0xa144) (async) shmctl$SHM_LOCK(r1, 0xb) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/135) (async) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000140)=""/142) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/152) 00:17:18 executing program 1: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x4, 0x4) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/123) (async) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140)=0x400, &(0x7f0000000180)=0x4) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xc00) 00:17:18 executing program 4: r0 = geteuid() r1 = getegid() pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r2, &(0x7f00000002c0)={0x7}, 0x7) (async) write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x1342, {0x20, 0x4, 0x3}, 0x11, r0, r1, 0x0, 0x1f, 0x10, 0xfa3, 0x1, 0x22, 0x0, 0x5, 0x101, 0x4, 0x2, 0x10000, 0x2, 0xfffffffffffffff8, 0x7}}, 0xa0) getegid() (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x1294, {0x20, 0x2, 0x8}, 0x84, r0, r1, 0x5b, 0x8000, 0x7, 0xb8b3, 0x4, 0xc4, 0x400, 0x1, 0x186c, 0x9, 0x0, 0x8, 0x8, 0x99ac, 0xbf8}}, 0xa0) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:18 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 64) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/20) (async, rerun: 64) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x51c8) (async) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r2, 0xa144) (async) shmctl$SHM_LOCK(r1, 0xb) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/135) (async, rerun: 64) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000140)=""/142) (rerun: 64) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/152) 00:17:18 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/123) [ 1301.221741] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffd}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c041}, 0x41) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x68}, 0x1, 0x0, 0x0, 0xc2a8d0666622e12f}, 0x40045) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:18 executing program 1: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x4, 0x4) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 64) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/123) (async, rerun: 64) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140)=0x400, &(0x7f0000000180)=0x4) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xc00) 00:17:18 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) [ 1301.327840] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.333454] ieee802154 phy1 wpan1: encryption failed: -22 00:17:18 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:18 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = getpid() shmctl$IPC_RMID(r0, 0x0) getpgid(r1) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x7}, 0x3, 0x4, 0xfff, 0x5, r1, 0x0, 0xfff7}) 00:17:18 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:18 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/5) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) [ 1301.519592] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = getpid() shmctl$IPC_RMID(r0, 0x0) getpgid(r1) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x7}, 0x3, 0x4, 0xfff, 0x5, r1, 0x0, 0xfff7}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) getpid() (async) shmctl$IPC_RMID(r0, 0x0) (async) getpgid(r1) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x7}, 0x3, 0x4, 0xfff, 0x5, r1, 0x0, 0xfff7}) (async) 00:17:18 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffd}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c041}, 0x41) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x68}, 0x1, 0x0, 0x0, 0xc2a8d0666622e12f}, 0x40045) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:18 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/5) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) 00:17:18 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/56) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/31) 00:17:18 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:17:18 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:18 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = getpid() shmctl$IPC_RMID(r0, 0x0) (async) getpgid(r1) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x7}, 0x3, 0x4, 0xfff, 0x5, r1, 0x0, 0xfff7}) 00:17:18 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/5) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) [ 1301.736990] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 0: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x2efd4a6a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) 00:17:18 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/56) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/31) 00:17:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:18 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:17:18 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) 00:17:18 executing program 3: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) [ 1301.889672] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:19 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) 00:17:19 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:17:19 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/56) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/31) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/56) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/31) (async) 00:17:19 executing program 0: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x2efd4a6a) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) 00:17:19 executing program 3: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 00:17:19 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) 00:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:19 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) 00:17:19 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) 00:17:19 executing program 3: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 32) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (rerun: 32) [ 1302.070312] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:19 executing program 0: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x2efd4a6a) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) 00:17:19 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/161) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000000c0)=""/97) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffa000/0x2000)=nil) 00:17:19 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) 00:17:19 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) (async) 00:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300795a2b36f06728808c588b8ce73499120818beb48de9b195df9ed56bb7ad230107c5c0f2d1a78e42ef7b321b74d829010c34bd62d927af12fc6c263ec48e0626d90836846513e5ef56d8cb043d", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:19 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x6}}, 0x20) r0 = geteuid() r1 = getegid() r2 = getegid() r3 = getpgid(0x0) r4 = getpid() getpgid(r4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x1, r0, r1, 0xffffffffffffffff, r2, 0x62, 0x5}, 0x3, 0x48, 0x4, 0x8, r3, r4, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4000000000000003, {0x3, 0x8, "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", 0x8d, 0x37, 0x2, 0x0, 0xc1, 0x0, 0x5, 0x11}, r5}}, 0x128) 00:17:19 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/161) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000000c0)=""/97) (async) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffa000/0x2000)=nil) 00:17:19 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) 00:17:19 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/161) (async, rerun: 32) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 32) r2 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000000c0)=""/97) (async) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffa000/0x2000)=nil) 00:17:19 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) (async) 00:17:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x3ff, 0x7, "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", 0x1, 0x6, 0x8, 0x7, 0xb1, 0x2, 0x81, 0x1}}}, 0x120) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:19 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x6}}, 0x20) r0 = geteuid() r1 = getegid() r2 = getegid() r3 = getpgid(0x0) r4 = getpid() getpgid(r4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x1, r0, r1, 0xffffffffffffffff, r2, 0x62, 0x5}, 0x3, 0x48, 0x4, 0x8, r3, r4, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4000000000000003, {0x3, 0x8, "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", 0x8d, 0x37, 0x2, 0x0, 0xc1, 0x0, 0x5, 0x11}, r5}}, 0x128) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x6}}, 0x20) (async) geteuid() (async) getegid() (async) getegid() (async) getpgid(0x0) (async) getpid() (async) getpgid(r4) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x1, r0, r1, 0xffffffffffffffff, r2, 0x62, 0x5}, 0x3, 0x48, 0x4, 0x8, r3, r4, 0x1}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x13f, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4000000000000003, {0x3, 0x8, "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", 0x8d, 0x37, 0x2, 0x0, 0xc1, 0x0, 0x5, 0x11}, r5}}, 0x128) (async) 00:17:19 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/131) shmget(0x1, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 00:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 00:17:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x6, "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", 0xff, 0x9, 0x3, 0x5d, 0x8, 0x81, 0x4, 0x1}}}, 0x128) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r2, 0x8}}, 0x10) 00:17:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x3ff, 0x7, "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", 0x1, 0x6, 0x8, 0x7, 0xb1, 0x2, 0x81, 0x1}}}, 0x120) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x3ff, 0x7, "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", 0x1, 0x6, 0x8, 0x7, 0xb1, 0x2, 0x81, 0x1}}}, 0x120) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:19 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x6}}, 0x20) (async) r0 = geteuid() r1 = getegid() (async) r2 = getegid() (async) r3 = getpgid(0x0) (async) r4 = getpid() getpgid(r4) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x1, r0, r1, 0xffffffffffffffff, r2, 0x62, 0x5}, 0x3, 0x48, 0x4, 0x8, r3, r4, 0x1}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4000000000000003, {0x3, 0x8, "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", 0x8d, 0x37, 0x2, 0x0, 0xc1, 0x0, 0x5, 0x11}, r5}}, 0x128) 00:17:19 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 64) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/131) (async, rerun: 64) shmget(0x1, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 00:17:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x6, "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", 0xff, 0x9, 0x3, 0x5d, 0x8, 0x81, 0x4, 0x1}}}, 0x128) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r2, 0x8}}, 0x10) 00:17:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) 00:17:19 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x3ff, 0x7, "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", 0x1, 0x6, 0x8, 0x7, 0xb1, 0x2, 0x81, 0x1}}}, 0x120) (async, rerun: 32) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (rerun: 32) 00:17:19 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x52147e822827605}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x200008a0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9281d519b048d5245fe7472a933689d1e0411cf14a7d862f4a0a17459225af27b57ba7f0698c0e11e4f5ca5be7e6f3ecec744d68352ef953e07dc03206352c48ff9e1b010c298046036f37730334e2fc579ec20c2499c1c34381c3959a5be34c79f11d7e7e641f7255c1f8c1c3", @ANYRES16=r1, @ANYBLOB="79cd80e05b0e", @ANYRES32=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x6, "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", 0xff, 0x9, 0x3, 0x5d, 0x8, 0x81, 0x4, 0x1}}}, 0x128) (async, rerun: 32) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r2, 0x8}}, 0x10) 00:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:19 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/131) shmget(0x1, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 00:17:19 executing program 2: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) 00:17:19 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 32) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) (rerun: 32) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:20 executing program 4: r0 = gettid() ptrace$setregs(0xd, r0, 0xfc65, &(0x7f0000000000)="eb46e214e61a11a5f7b6b0e0b4d98569896a4669ceabcd277c4e4f22984f255503ba6764495efc70b64646d4415007d7c54ed5739d5ae9491e5cd699fefe63845c8cc1b9d4d660f7859b4cc2e5e276e6fc1994b9b67e44c0f8b1fa4909c3a21ae4fddeed0fa8081a8110674fcde1c96fecd6a06c5581c98b3af52ba89f18682fc2516b5615fbe0e79284b3614628") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff8000/0x4000)=nil) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r7) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x52147e822827605}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x200008a0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9281d519b048d5245fe7472a933689d1e0411cf14a7d862f4a0a17459225af27b57ba7f0698c0e11e4f5ca5be7e6f3ecec744d68352ef953e07dc03206352c48ff9e1b010c298046036f37730334e2fc579ec20c2499c1c34381c3959a5be34c79f11d7e7e641f7255c1f8c1c3", @ANYRES16=r1, @ANYBLOB="79cd80e05b0e", @ANYRES32=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:20 executing program 2: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) 00:17:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) r1 = getegid() r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0xee01, r1, r2, 0x0, 0x140}, 0x5, 0x3f, 0x2, 0x69, 0xffffffffffffffff, 0x0, 0xd4ec}) 00:17:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:20 executing program 4: r0 = gettid() ptrace$setregs(0xd, r0, 0xfc65, &(0x7f0000000000)="eb46e214e61a11a5f7b6b0e0b4d98569896a4669ceabcd277c4e4f22984f255503ba6764495efc70b64646d4415007d7c54ed5739d5ae9491e5cd699fefe63845c8cc1b9d4d660f7859b4cc2e5e276e6fc1994b9b67e44c0f8b1fa4909c3a21ae4fddeed0fa8081a8110674fcde1c96fecd6a06c5581c98b3af52ba89f18682fc2516b5615fbe0e79284b3614628") (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff8000/0x4000)=nil) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x52147e822827605}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x200008a0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9281d519b048d5245fe7472a933689d1e0411cf14a7d862f4a0a17459225af27b57ba7f0698c0e11e4f5ca5be7e6f3ecec744d68352ef953e07dc03206352c48ff9e1b010c298046036f37730334e2fc579ec20c2499c1c34381c3959a5be34c79f11d7e7e641f7255c1f8c1c3", @ANYRES16=r1, @ANYBLOB="79cd80e05b0e", @ANYRES32=r0, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r7) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x52147e822827605}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x200008a0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9281d519b048d5245fe7472a933689d1e0411cf14a7d862f4a0a17459225af27b57ba7f0698c0e11e4f5ca5be7e6f3ecec744d68352ef953e07dc03206352c48ff9e1b010c298046036f37730334e2fc579ec20c2499c1c34381c3959a5be34c79f11d7e7e641f7255c1f8c1c3", @ANYRES16=r1, @ANYBLOB="79cd80e05b0e", @ANYRES32=r0, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:20 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) r1 = getegid() r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0xee01, r1, r2, 0x0, 0x140}, 0x5, 0x3f, 0x2, 0x69, 0xffffffffffffffff, 0x0, 0xd4ec}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) (async) getegid() (async) geteuid() (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0xee01, r1, r2, 0x0, 0x140}, 0x5, 0x3f, 0x2, 0x69, 0xffffffffffffffff, 0x0, 0xd4ec}) (async) 00:17:20 executing program 2: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) (async) 00:17:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:20 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) (async) 00:17:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) (async, rerun: 64) r1 = getegid() (async, rerun: 64) r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0xee01, r1, r2, 0x0, 0x140}, 0x5, 0x3f, 0x2, 0x69, 0xffffffffffffffff, 0x0, 0xd4ec}) 00:17:20 executing program 4: r0 = gettid() ptrace$setregs(0xd, r0, 0xfc65, &(0x7f0000000000)="eb46e214e61a11a5f7b6b0e0b4d98569896a4669ceabcd277c4e4f22984f255503ba6764495efc70b64646d4415007d7c54ed5739d5ae9491e5cd699fefe63845c8cc1b9d4d660f7859b4cc2e5e276e6fc1994b9b67e44c0f8b1fa4909c3a21ae4fddeed0fa8081a8110674fcde1c96fecd6a06c5581c98b3af52ba89f18682fc2516b5615fbe0e79284b3614628") (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff8000/0x4000)=nil) 00:17:20 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:20 executing program 2: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x8000, 0x5, 0x0, [{0x100080, 0x1000, 0x8, 0x9b, 0x3, 0x4, 0x2, '\x00', 0x8}, {0x1, 0xc5c, 0x40, 0x0, 0xff, 0xff, 0x96, '\x00', 0xfffffffffffffffb}, {0xea, 0x1, 0x7, 0x0, 0x6, 0x8, 0x6, '\x00', 0xffffffff80000001}, {0x5, 0xaf6, 0x1, 0x4, 0x0, 0x3f, 0x5, '\x00', 0x763c000}, {0x5, 0x19, 0x5, 0xbf, 0x1, 0x5, 0xf4, '\x00', 0x7f}]}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x90000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x2) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300e0887dfdbae9cffd361290a6aaa5de3bfe0eb69a181cfa4a7cd7917b31274085d485031448dbfc458724eece06f3db1089620639ad6c5821e791e55d25fed87e13d678b76d435a437197aca3d69c9894c7880a05694d119a965e1ce2731d5484ba0663f46d86685888a82714b59acdc771dc257a5ec6bf1c4f47c143660a6854674939ed611070cd939d359e3347c2abdf3efee20ebd271f94513e43ae7883f30bc4e905727472bf4d919b4d3f40ce29c79744d00b9be60ce0a2f6c24fc3bbddf673d84623a4aba52e70", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:20 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:20 executing program 2: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x8000, 0x5, 0x0, [{0x100080, 0x1000, 0x8, 0x9b, 0x3, 0x4, 0x2, '\x00', 0x8}, {0x1, 0xc5c, 0x40, 0x0, 0xff, 0xff, 0x96, '\x00', 0xfffffffffffffffb}, {0xea, 0x1, 0x7, 0x0, 0x6, 0x8, 0x6, '\x00', 0xffffffff80000001}, {0x5, 0xaf6, 0x1, 0x4, 0x0, 0x3f, 0x5, '\x00', 0x763c000}, {0x5, 0x19, 0x5, 0xbf, 0x1, 0x5, 0xf4, '\x00', 0x7f}]}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x90000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x2) 00:17:20 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0xffffffff}}, 0x18) 00:17:20 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003285a1194ff57a7155883ba7f39949dc231dc1d48a6db56a09f4bdb2b144759d425b2eb12fbca1540f6b9c848b0e71d555752bd67d98642c0baa9efbf92bfc7c7529df6965bea958ab5e106efc7b89e805f50558b5613638482ef6aac411c3938ecc40b96976885405b3c007000000efa7789bb0c23d25eed80103f8c5569a39e115f3ae486534e869a8b8244713a749be0fbbc2d11bcb4bb1b3f544eb86361e9b905dd4ca000000000000000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250f00000005000f00000000000c00060002000000020000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="dbce86eb006cc8ad5087dda1c109"], 0x44}, 0x1, 0x0, 0x0, 0x24040041}, 0x4000810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc405}, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004091) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0x31, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000230000fffffffb00000000bdcfae3089a27193e5cd6645dfb41a9f839e13717aa1d325b64267ea945382efb9efadb9b88f3a2a93650d08d05d5eb8c13a636ac3941c62c16d496bb459d737d4b542c72c9e00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000003fce901219074418359662d4148330aeef9234394374388f28161fdbced0f23b34e74b47741cf0923f232066b9ac9183e6fc02caa3b28b929b27d98d833f5154e16b38803e3bf167c18b361b8a057149c86a6f1a27743c99d4cef13c360e7b7e1a8764db1a360d79ee5ac88403028f5e10e4c5423af7ea701d", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250f00000005000f00000000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="03000300", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000540)) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300e0887dfdbae9cffd361290a6aaa5de3bfe0eb69a181cfa4a7cd7917b31274085d485031448dbfc458724eece06f3db1089620639ad6c5821e791e55d25fed87e13d678b76d435a437197aca3d69c9894c7880a05694d119a965e1ce2731d5484ba0663f46d86685888a82714b59acdc771dc257a5ec6bf1c4f47c143660a6854674939ed611070cd939d359e3347c2abdf3efee20ebd271f94513e43ae7883f30bc4e905727472bf4d919b4d3f40ce29c79744d00b9be60ce0a2f6c24fc3bbddf673d84623a4aba52e70", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300e0887dfdbae9cffd361290a6aaa5de3bfe0eb69a181cfa4a7cd7917b31274085d485031448dbfc458724eece06f3db1089620639ad6c5821e791e55d25fed87e13d678b76d435a437197aca3d69c9894c7880a05694d119a965e1ce2731d5484ba0663f46d86685888a82714b59acdc771dc257a5ec6bf1c4f47c143660a6854674939ed611070cd939d359e3347c2abdf3efee20ebd271f94513e43ae7883f30bc4e905727472bf4d919b4d3f40ce29c79744d00b9be60ce0a2f6c24fc3bbddf673d84623a4aba52e70", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:20 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:20 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0xffffffff}}, 0x18) 00:17:20 executing program 2: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x8000, 0x5, 0x0, [{0x100080, 0x1000, 0x8, 0x9b, 0x3, 0x4, 0x2, '\x00', 0x8}, {0x1, 0xc5c, 0x40, 0x0, 0xff, 0xff, 0x96, '\x00', 0xfffffffffffffffb}, {0xea, 0x1, 0x7, 0x0, 0x6, 0x8, 0x6, '\x00', 0xffffffff80000001}, {0x5, 0xaf6, 0x1, 0x4, 0x0, 0x3f, 0x5, '\x00', 0x763c000}, {0x5, 0x19, 0x5, 0xbf, 0x1, 0x5, 0xf4, '\x00', 0x7f}]}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x90000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x2) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x8000, 0x5, 0x0, [{0x100080, 0x1000, 0x8, 0x9b, 0x3, 0x4, 0x2, '\x00', 0x8}, {0x1, 0xc5c, 0x40, 0x0, 0xff, 0xff, 0x96, '\x00', 0xfffffffffffffffb}, {0xea, 0x1, 0x7, 0x0, 0x6, 0x8, 0x6, '\x00', 0xffffffff80000001}, {0x5, 0xaf6, 0x1, 0x4, 0x0, 0x3f, 0x5, '\x00', 0x763c000}, {0x5, 0x19, 0x5, 0xbf, 0x1, 0x5, 0xf4, '\x00', 0x7f}]}) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x90000) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x2) (async) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300e0887dfdbae9cffd361290a6aaa5de3bfe0eb69a181cfa4a7cd7917b31274085d485031448dbfc458724eece06f3db1089620639ad6c5821e791e55d25fed87e13d678b76d435a437197aca3d69c9894c7880a05694d119a965e1ce2731d5484ba0663f46d86685888a82714b59acdc771dc257a5ec6bf1c4f47c143660a6854674939ed611070cd939d359e3347c2abdf3efee20ebd271f94513e43ae7883f30bc4e905727472bf4d919b4d3f40ce29c79744d00b9be60ce0a2f6c24fc3bbddf673d84623a4aba52e70", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="79cd88000300e0887dfdbae9cffd361290a6aaa5de3bfe0eb69a181cfa4a7cd7917b31274085d485031448dbfc458724eece06f3db1089620639ad6c5821e791e55d25fed87e13d678b76d435a437197aca3d69c9894c7880a05694d119a965e1ce2731d5484ba0663f46d86685888a82714b59acdc771dc257a5ec6bf1c4f47c143660a6854674939ed611070cd939d359e3347c2abdf3efee20ebd271f94513e43ae7883f30bc4e905727472bf4d919b4d3f40ce29c79744d00b9be60ce0a2f6c24fc3bbddf673d84623a4aba52e70", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) 00:17:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003285a1194ff57a7155883ba7f39949dc231dc1d48a6db56a09f4bdb2b144759d425b2eb12fbca1540f6b9c848b0e71d555752bd67d98642c0baa9efbf92bfc7c7529df6965bea958ab5e106efc7b89e805f50558b5613638482ef6aac411c3938ecc40b96976885405b3c007000000efa7789bb0c23d25eed80103f8c5569a39e115f3ae486534e869a8b8244713a749be0fbbc2d11bcb4bb1b3f544eb86361e9b905dd4ca000000000000000000"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250f00000005000f00000000000c00060002000000020000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="dbce86eb006cc8ad5087dda1c109"], 0x44}, 0x1, 0x0, 0x0, 0x24040041}, 0x4000810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc405}, 0xc) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004091) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0x31, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000230000fffffffb00000000bdcfae3089a27193e5cd6645dfb41a9f839e13717aa1d325b64267ea945382efb9efadb9b88f3a2a93650d08d05d5eb8c13a636ac3941c62c16d496bb459d737d4b542c72c9e00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000003fce901219074418359662d4148330aeef9234394374388f28161fdbced0f23b34e74b47741cf0923f232066b9ac9183e6fc02caa3b28b929b27d98d833f5154e16b38803e3bf167c18b361b8a057149c86a6f1a27743c99d4cef13c360e7b7e1a8764db1a360d79ee5ac88403028f5e10e4c5423af7ea701d", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250f00000005000f00000000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="03000300", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) (async) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000540)) 00:17:20 executing program 4: shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffa000/0x2000)=nil) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='#!\'!//\xc7+}\x00', 0xfffffffffffffffb) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000881}, 0x4000) 00:17:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x64) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) 00:17:20 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0xffffffff}}, 0x18) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0xffffffff}}, 0x18) (async) 00:17:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:20 executing program 4: shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffa000/0x2000)=nil) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='#!\'!//\xc7+}\x00', 0xfffffffffffffffb) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffa000/0x2000)=nil) (async) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='#!\'!//\xc7+}\x00', 0xfffffffffffffffb) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) (async) 00:17:20 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4316d) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/86) 00:17:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000881}, 0x4000) 00:17:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x64) (async) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) 00:17:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:20 executing program 4: shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffa000/0x2000)=nil) (async) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='#!\'!//\xc7+}\x00', 0xfffffffffffffffb) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) 00:17:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003285a1194ff57a7155883ba7f39949dc231dc1d48a6db56a09f4bdb2b144759d425b2eb12fbca1540f6b9c848b0e71d555752bd67d98642c0baa9efbf92bfc7c7529df6965bea958ab5e106efc7b89e805f50558b5613638482ef6aac411c3938ecc40b96976885405b3c007000000efa7789bb0c23d25eed80103f8c5569a39e115f3ae486534e869a8b8244713a749be0fbbc2d11bcb4bb1b3f544eb86361e9b905dd4ca000000000000000000"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250f00000005000f00000000000c00060002000000020000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="dbce86eb006cc8ad5087dda1c109"], 0x44}, 0x1, 0x0, 0x0, 0x24040041}, 0x4000810) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc405}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004091) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0x31, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000230000fffffffb00000000bdcfae3089a27193e5cd6645dfb41a9f839e13717aa1d325b64267ea945382efb9efadb9b88f3a2a93650d08d05d5eb8c13a636ac3941c62c16d496bb459d737d4b542c72c9e00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000003fce901219074418359662d4148330aeef9234394374388f28161fdbced0f23b34e74b47741cf0923f232066b9ac9183e6fc02caa3b28b929b27d98d833f5154e16b38803e3bf167c18b361b8a057149c86a6f1a27743c99d4cef13c360e7b7e1a8764db1a360d79ee5ac88403028f5e10e4c5423af7ea701d", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250f00000005000f00000000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="03000300", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) (async) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000540)) 00:17:20 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4316d) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/86) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4316d) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/86) (async) 00:17:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x64) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x64) (async) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:21 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:21 executing program 4: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 00:17:21 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4316d) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/86) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4316d) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/86) (async) 00:17:21 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/123) 00:17:21 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000881}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000881}, 0x4000) (async) 00:17:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) 00:17:21 executing program 4: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 00:17:21 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/123) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/123) (async) 00:17:21 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) 00:17:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) (async) 00:17:21 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) [ 1304.199133] nla_parse: 1 callbacks suppressed [ 1304.199141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:21 executing program 4: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) 00:17:21 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/123) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/123) (async) [ 1304.253949] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="af8803970000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 00:17:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) 00:17:21 executing program 4: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:21 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) 00:17:21 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0xb5c, "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", 0x5, 0x1, 0x77, 0x1, 0x8, 0x9c, 0x4}, r1}}, 0x128) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) 00:17:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff8000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) 00:17:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="af8803970000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="af8803970000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) 00:17:21 executing program 4: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) (async, rerun: 32) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (rerun: 32) 00:17:21 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) (async) 00:17:21 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0xb5c, "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", 0x5, 0x1, 0x77, 0x1, 0x8, 0x9c, 0x4}, r1}}, 0x128) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0xb5c, "689361b22609c775338a535eda0a695f6ab40eb85c342680806b64523c85e95398912f469611dce3210f130cd809497b6e2c9928dc5ce2f6b78637f7d688d602106eaaf9b709298cb71c124bde176f69c13a86b93ee8c020e1157d3438ed41d6af75bff89fba6a92bb92dbe61a20813ca85dca8659f5ea4b032ba0b5dc7f4b9ec3c0fefe3235ca769e1f22476b7b8f6db29c1647494f10fe3c906adf8454a7e4944ffb78cc095486c31ca6d8bb30beba3963a5b60c83e6618d4a5365345fac91be5ede903657e26e42e4398a6760e815364c456d462429f60e18fd7ce81d7e9faf518c71b22f76adaba70a08a8e39c93481b4d09106884f5d533cf8ea4cb68f8", 0x5, 0x1, 0x77, 0x1, 0x8, 0x9c, 0x4}, r1}}, 0x128) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) (async) shmctl$SHM_LOCK(r3, 0xb) (async) 00:17:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff8000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff8000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$IPC_RMID(r1, 0x0) (async) 00:17:21 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/4106) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/99) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/81) 00:17:21 executing program 4: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="af8803970000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 00:17:21 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0xb5c, "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", 0x5, 0x1, 0x77, 0x1, 0x8, 0x9c, 0x4}, r1}}, 0x128) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) 00:17:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff8000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$IPC_RMID(r1, 0x0) 00:17:21 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/4106) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/99) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/81) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) (async) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/4106) (async) shmctl$IPC_RMID(r0, 0x0) (async) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/99) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/81) (async) 00:17:21 executing program 4: shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) 00:17:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xf0, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xdc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa3a}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc22}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48818}, 0x34000045) 00:17:21 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x800, 0x40, 0x6, 0x80000001}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/25) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ff8000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/73) 00:17:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:21 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = shmget(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x3, 0xee01, r1, r2, r3, 0x10, 0xceb}, 0x1, 0x44a6, 0x0, 0x3ff, r4, 0x0, 0x2}) 00:17:21 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/4106) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/99) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/81) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) (async) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/4106) (async) shmctl$IPC_RMID(r0, 0x0) (async) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/99) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/81) (async) 00:17:21 executing program 4: shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) 00:17:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) [ 1304.877452] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:21 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x800, 0x40, 0x6, 0x80000001}) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/25) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ff8000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/73) 00:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xf0, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xdc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa3a}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc22}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48818}, 0x34000045) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async) r0 = shmget(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) (async, rerun: 64) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) r2 = geteuid() (async) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) (async) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x3, 0xee01, r1, r2, r3, 0x10, 0xceb}, 0x1, 0x44a6, 0x0, 0x3ff, r4, 0x0, 0x2}) 00:17:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:22 executing program 4: shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:22 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/26) 00:17:22 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x800, 0x40, 0x6, 0x80000001}) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 64) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) (rerun: 64) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/25) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ff8000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/73) 00:17:22 executing program 4: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async) r0 = shmget(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) (async) r2 = geteuid() (async) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) (async) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x3, 0xee01, r1, r2, r3, 0x10, 0xceb}, 0x1, 0x44a6, 0x0, 0x3ff, r4, 0x0, 0x2}) [ 1305.057335] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xf0, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xdc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa3a}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc22}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48818}, 0x34000045) (rerun: 64) 00:17:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:22 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/26) 00:17:22 executing program 4: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 00:17:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x94) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/100) r1 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) 00:17:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) [ 1305.217882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1305.233330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1305.254757] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:22 executing program 4: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 00:17:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x94) (async, rerun: 64) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (rerun: 64) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:22 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/26) [ 1305.294286] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/100) (async) r1 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) 00:17:22 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/203) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x7fff, 0x4, "38e5fd94d5ac0911cf797e27d1bfd073d9ec0215a06b452e2465757cc66d78f39741d32833f3c94acb0431ff8603728b04103e457823d8c5034adfc9c7590f0d1d07db6d117ef2f83f05a886187aedded7b251eece4c6a6f2d3dc4d9bd303c6b9be0eac91a035d66f8dada02b52f80111c9a77f9d34ec62223629ba5e758f8d10ba70b3cba5ba21b9595eb161787feabb9c5c7af219adbdabed50c00f4e64e02bf410f6a17e6be38fa3cafb3a9193fa32554ac4da3e41679bce06bb192889bcecdce98c14cccb714cbbccc13f4b21f7e3dd915ee3a6545487ebffe263d4c5cd559a2dc82ba5259f5a4ce626937aa936954373a427b63f2957556192584e20217", 0xff, 0x81, 0x7f, 0xff, 0x81, 0x6, 0x9}, r2}}, 0x120) [ 1305.356002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1305.411762] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x100, 0x70bd28, 0x1, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x54}}, 0x8005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r4) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc015}, 0x4001) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e6538a7ae46540c01906910f9e36a415"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 00:17:22 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x3, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x94) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x94) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) 00:17:22 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/203) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x7fff, 0x4, "38e5fd94d5ac0911cf797e27d1bfd073d9ec0215a06b452e2465757cc66d78f39741d32833f3c94acb0431ff8603728b04103e457823d8c5034adfc9c7590f0d1d07db6d117ef2f83f05a886187aedded7b251eece4c6a6f2d3dc4d9bd303c6b9be0eac91a035d66f8dada02b52f80111c9a77f9d34ec62223629ba5e758f8d10ba70b3cba5ba21b9595eb161787feabb9c5c7af219adbdabed50c00f4e64e02bf410f6a17e6be38fa3cafb3a9193fa32554ac4da3e41679bce06bb192889bcecdce98c14cccb714cbbccc13f4b21f7e3dd915ee3a6545487ebffe263d4c5cd559a2dc82ba5259f5a4ce626937aa936954373a427b63f2957556192584e20217", 0xff, 0x81, 0x7f, 0xff, 0x81, 0x6, 0x9}, r2}}, 0x120) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/203) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x7fff, 0x4, "38e5fd94d5ac0911cf797e27d1bfd073d9ec0215a06b452e2465757cc66d78f39741d32833f3c94acb0431ff8603728b04103e457823d8c5034adfc9c7590f0d1d07db6d117ef2f83f05a886187aedded7b251eece4c6a6f2d3dc4d9bd303c6b9be0eac91a035d66f8dada02b52f80111c9a77f9d34ec62223629ba5e758f8d10ba70b3cba5ba21b9595eb161787feabb9c5c7af219adbdabed50c00f4e64e02bf410f6a17e6be38fa3cafb3a9193fa32554ac4da3e41679bce06bb192889bcecdce98c14cccb714cbbccc13f4b21f7e3dd915ee3a6545487ebffe263d4c5cd559a2dc82ba5259f5a4ce626937aa936954373a427b63f2957556192584e20217", 0xff, 0x81, 0x7f, 0xff, 0x81, 0x6, 0x9}, r2}}, 0x120) (async) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/100) r1 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/100) (async) shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) 00:17:22 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/4096) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/104) 00:17:22 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x3, 0x3}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x100, 0x70bd28, 0x1, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x54}}, 0x8005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r4) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc015}, 0x4001) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e6538a7ae46540c01906910f9e36a415"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x100, 0x70bd28, 0x1, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x54}}, 0x8005) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r4) (async) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc015}, 0x4001) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e6538a7ae46540c01906910f9e36a415"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async) 00:17:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:22 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/203) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x7fff, 0x4, "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", 0xff, 0x81, 0x7f, 0xff, 0x81, 0x6, 0x9}, r2}}, 0x120) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/16) 00:17:22 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x3, 0x3}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:22 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 64) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 64) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) (async, rerun: 32) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/4096) (async, rerun: 32) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/104) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/16) 00:17:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x100, 0x70bd28, 0x1, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x54}}, 0x8005) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r4) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc015}, 0x4001) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e6538a7ae46540c01906910f9e36a415"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 00:17:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x44502) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x70080, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x7fb) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:22 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/16) 00:17:22 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = gettid() r2 = getpid() getpgid(r2) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3}, 0x1, 0x2, 0x5, 0x3ff, r1, r2, 0x1ff}) 00:17:22 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/4096) (async) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/104) 00:17:22 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e3f100001916f7747d8a00009b18c2ad6443c1391433a0", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 00:17:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x44502) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x70080, 0x0) (async, rerun: 64) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x7fb) (rerun: 64) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:23 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = gettid() (async, rerun: 64) r2 = getpid() (rerun: 64) getpgid(r2) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3}, 0x1, 0x2, 0x5, 0x3ff, r1, r2, 0x1ff}) 00:17:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000006c0)) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000180)={0xffff, 0x7fffffff, 0x1}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYRES16=r3], 0x1c}}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000300)) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000340)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xba}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008080) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) 00:17:23 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e3f100001916f7747d8a00009b18c2ad6443c1391433a0", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 00:17:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:23 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f0000000100)="4a161af71ec69783893043628a5a584380cdd012ed76864d12300003e40844edbe84bed10505de54359aa533ee3408a4cfa908e288d3d6bbe3ca36830ef88170079083c500cab576c99cd8dcd2e06baa8aeaa7a5a30cd92ab2f72adb6a8cd3e74ad2bf8559adee2d16b23e") shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000540)=""/211) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000180)) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000380)=""/158) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) r6 = getegid() r7 = getpid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000440)={{0x3, 0xee01, r2, 0xee00, r6, 0x0, 0x3ff}, 0xb4, 0x3, 0xffffffffffffffff, 0xfff, r7, 0x0, 0x1000}) 00:17:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x44502) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x70080, 0x0) (async, rerun: 32) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x7fb) (async, rerun: 32) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:23 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e3f100001916f7747d8a00009b18c2ad6443c1391433a0", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e3f100001916f7747d8a00009b18c2ad6443c1391433a0", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 00:17:23 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = gettid() r2 = getpid() getpgid(r2) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3}, 0x1, 0x2, 0x5, 0x3ff, r1, r2, 0x1ff}) 00:17:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) (async) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) (async) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000006c0)) (async) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000180)={0xffff, 0x7fffffff, 0x1}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYRES16=r3], 0x1c}}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000300)) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000340)) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xba}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008080) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) 00:17:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:23 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f0000000100)="4a161af71ec69783893043628a5a584380cdd012ed76864d12300003e40844edbe84bed10505de54359aa533ee3408a4cfa908e288d3d6bbe3ca36830ef88170079083c500cab576c99cd8dcd2e06baa8aeaa7a5a30cd92ab2f72adb6a8cd3e74ad2bf8559adee2d16b23e") (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000540)=""/211) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000180)) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) r4 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000380)=""/158) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) (async) r6 = getegid() (async) r7 = getpid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000440)={{0x3, 0xee01, r2, 0xee00, r6, 0x0, 0x3ff}, 0xb4, 0x3, 0xffffffffffffffff, 0xfff, r7, 0x0, 0x1000}) 00:17:23 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x4) 00:17:23 executing program 3: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x9, 0x3, 0xa1}) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x1512aa2e, 0x3, 0x9}}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/34) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:17:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32, @ANYRES32=0x0], 0x24}}, 0x0) 00:17:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000006c0)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000006c0)) (async) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000180)={0xffff, 0x7fffffff, 0x1}) (async, rerun: 32) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYRES16=r3], 0x1c}}, 0x40000) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000300)) (async, rerun: 64) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000340)) (async, rerun: 64) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xba}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008080) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) (rerun: 64) 00:17:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:23 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f0000000100)="4a161af71ec69783893043628a5a584380cdd012ed76864d12300003e40844edbe84bed10505de54359aa533ee3408a4cfa908e288d3d6bbe3ca36830ef88170079083c500cab576c99cd8dcd2e06baa8aeaa7a5a30cd92ab2f72adb6a8cd3e74ad2bf8559adee2d16b23e") (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000540)=""/211) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000180)) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) r4 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000380)=""/158) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) r6 = getegid() (async) r7 = getpid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000440)={{0x3, 0xee01, r2, 0xee00, r6, 0x0, 0x3ff}, 0xb4, 0x3, 0xffffffffffffffff, 0xfff, r7, 0x0, 0x1000}) 00:17:23 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/6) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x4) 00:17:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32, @ANYRES32=0x0], 0x24}}, 0x0) 00:17:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:23 executing program 1: r0 = getpid() getpgid(r0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32, @ANYRES32=0x0], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32, @ANYRES32=0x0], 0x24}}, 0x0) (async) 00:17:23 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x4) 00:17:23 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/222) r1 = shmget$private(0x0, 0x1000, 0x2b58, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/106) 00:17:24 executing program 3: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x9, 0x3, 0xa1}) (async) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x1512aa2e, 0x3, 0x9}}) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/34) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:17:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="79cd944888c28e0cb76a16b1a9aae563b500751e3f9f1cc1f03ac71a34e137c641295735ed3152513a1937a22e3af5479b151f77ae1ad0b54ae95975e3d927885489f32eacde0318450269510e1f9ca17ac9a74e0ce595c582c41e9945d9eda4abd0cccb17e455e5ba4cd15eb506cc4c841f2919deced9b28d7e7e5fda547e5f", @ANYRES32, @ANYBLOB="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"/347], 0x24}}, 0x4040005) 00:17:24 executing program 1: r0 = getpid() getpgid(r0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:24 executing program 4: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) 00:17:24 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/222) (async) r1 = shmget$private(0x0, 0x1000, 0x2b58, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async, rerun: 32) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/106) (rerun: 32) 00:17:24 executing program 4: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) (async) 00:17:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="79cd944888c28e0cb76a16b1a9aae563b500751e3f9f1cc1f03ac71a34e137c641295735ed3152513a1937a22e3af5479b151f77ae1ad0b54ae95975e3d927885489f32eacde0318450269510e1f9ca17ac9a74e0ce595c582c41e9945d9eda4abd0cccb17e455e5ba4cd15eb506cc4c841f2919deced9b28d7e7e5fda547e5f", @ANYRES32, @ANYBLOB="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"/347], 0x24}}, 0x4040005) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="79cd944888c28e0cb76a16b1a9aae563b500751e3f9f1cc1f03ac71a34e137c641295735ed3152513a1937a22e3af5479b151f77ae1ad0b54ae95975e3d927885489f32eacde0318450269510e1f9ca17ac9a74e0ce595c582c41e9945d9eda4abd0cccb17e455e5ba4cd15eb506cc4c841f2919deced9b28d7e7e5fda547e5f", @ANYRES32, @ANYBLOB="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"/347], 0x24}}, 0x4040005) (async) 00:17:24 executing program 1: r0 = getpid() getpgid(r0) (async, rerun: 32) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 32) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:24 executing program 4: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) 00:17:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:25 executing program 3: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x9, 0x3, 0xa1}) (async) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x1512aa2e, 0x3, 0x9}}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/34) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:17:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="79cd944888c28e0cb76a16b1a9aae563b500751e3f9f1cc1f03ac71a34e137c641295735ed3152513a1937a22e3af5479b151f77ae1ad0b54ae95975e3d927885489f32eacde0318450269510e1f9ca17ac9a74e0ce595c582c41e9945d9eda4abd0cccb17e455e5ba4cd15eb506cc4c841f2919deced9b28d7e7e5fda547e5f", @ANYRES32, @ANYBLOB="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"/347], 0x24}}, 0x4040005) 00:17:25 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/222) r1 = shmget$private(0x0, 0x1000, 0x2b58, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/106) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/222) (async) shmget$private(0x0, 0x1000, 0x2b58, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/106) (async) 00:17:25 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/15) 00:17:25 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/45) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)) 00:17:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:25 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/15) 00:17:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:25 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "e39d26cbc6627ace7b0a8b384d6f1c6aa05501dfe181760ef970126a9adfbbe3b48cc2edc4f56077d2ffdd5658b5f08e6dab3c8c6adc87e07d3887cd06e016ca", 0x1f}, 0x48, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 00:17:25 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 32) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) (rerun: 32) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/45) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)) 00:17:25 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) mmap$xdp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x80000000) 00:17:25 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/15) 00:17:26 executing program 3: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/22) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 00:17:26 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "e39d26cbc6627ace7b0a8b384d6f1c6aa05501dfe181760ef970126a9adfbbe3b48cc2edc4f56077d2ffdd5658b5f08e6dab3c8c6adc87e07d3887cd06e016ca", 0x1f}, 0x48, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 00:17:26 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) mmap$xdp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x80000000) 00:17:26 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/45) (async, rerun: 64) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)) (rerun: 64) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:26 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/72) 00:17:26 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/72) 00:17:26 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) mmap$xdp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x80000000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) mmap$xdp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x80000000) (async) 00:17:26 executing program 4: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:17:26 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "e39d26cbc6627ace7b0a8b384d6f1c6aa05501dfe181760ef970126a9adfbbe3b48cc2edc4f56077d2ffdd5658b5f08e6dab3c8c6adc87e07d3887cd06e016ca", 0x1f}, 0x48, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "e39d26cbc6627ace7b0a8b384d6f1c6aa05501dfe181760ef970126a9adfbbe3b48cc2edc4f56077d2ffdd5658b5f08e6dab3c8c6adc87e07d3887cd06e016ca", 0x1f}, 0x48, 0xfffffffffffffffa) (async) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async) 00:17:26 executing program 3: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/22) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:26 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/72) [ 1309.269877] nla_parse: 65 callbacks suppressed [ 1309.269886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) shmget$private(0x0, 0x12000, 0x1000, &(0x7f0000fee000/0x12000)=nil) 00:17:26 executing program 3: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/22) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:26 executing program 4: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:17:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='k'], 0x24}}, 0x0) 00:17:26 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x2c, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}}, 0xa0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:26 executing program 4: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) (async) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:17:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) shmget$private(0x0, 0x12000, 0x1000, &(0x7f0000fee000/0x12000)=nil) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) (async) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) shmget$private(0x0, 0x12000, 0x1000, &(0x7f0000fee000/0x12000)=nil) (async) 00:17:26 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/1) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/73) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='k'], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='k'], 0x24}}, 0x0) (async) 00:17:26 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x2c, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}}, 0xa0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:26 executing program 4: shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff9000/0x2000)=nil) 00:17:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) shmget$private(0x0, 0x12000, 0x1000, &(0x7f0000fee000/0x12000)=nil) 00:17:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='k'], 0x24}}, 0x0) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:26 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x2c, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}}, 0xa0) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:26 executing program 4: shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff9000/0x2000)=nil) (async) 00:17:26 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/1) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/73) 00:17:26 executing program 2: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff7000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x4000)=nil) r2 = geteuid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0, 0x110, 0x1}, 0x3, 0x0, 0x8001, 0x7, 0x0, 0xffffffffffffffff, 0x12f2}) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ff5000/0x4000)=nil, 0x4000) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:26 executing program 4: shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff9000/0x2000)=nil) (async) 00:17:26 executing program 0: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)) 00:17:26 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/1) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/73) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/1) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/73) (async) 00:17:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:26 executing program 2: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff7000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x4000)=nil) (async, rerun: 32) r2 = geteuid() (rerun: 32) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0, 0x110, 0x1}, 0x3, 0x0, 0x8001, 0x7, 0x0, 0xffffffffffffffff, 0x12f2}) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) (async) shmat(r4, &(0x7f0000ff5000/0x4000)=nil, 0x4000) 00:17:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) write$P9_RGETLOCK(r4, &(0x7f0000000640)={0x1e, 0x37, 0x2, {0x2, 0x5}}, 0x1e) 00:17:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)) [ 1309.873469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x408, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0xb000, 0x800, 0x5, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x102185c, 0x4) 00:17:27 executing program 0: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) (async) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) (async) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) (async) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) (async) write$P9_RGETLOCK(r4, &(0x7f0000000640)={0x1e, 0x37, 0x2, {0x2, 0x5}}, 0x1e) 00:17:27 executing program 2: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff7000/0x2000)=nil) (async) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x4000)=nil) r2 = geteuid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0, 0x110, 0x1}, 0x3, 0x0, 0x8001, 0x7, 0x0, 0xffffffffffffffff, 0x12f2}) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ff5000/0x4000)=nil, 0x4000) 00:17:27 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)) 00:17:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x408, 0x4) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0xb000, 0x800, 0x5, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x102185c, 0x4) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}}, 0x0) 00:17:27 executing program 1: r0 = getpid() getpgid(r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4622, 0x1, 0x4, 0x80000000, r0}) 00:17:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x408, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0xb000, 0x800, 0x5, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x102185c, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x408, 0x4) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0xb000, 0x800, 0x5, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x102185c, 0x4) (async) 00:17:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r0, 0x40, r1) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/206) 00:17:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) (async) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) (async) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) (async) write$P9_RGETLOCK(r4, &(0x7f0000000640)={0x1e, 0x37, 0x2, {0x2, 0x5}}, 0x1e) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 00:17:27 executing program 0: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r0, 0x40, r1) (async) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/206) 00:17:27 executing program 3: r0 = shmget(0x1, 0x2000, 0xc20, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/7) 00:17:27 executing program 1: r0 = getpid() getpgid(r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4622, 0x1, 0x4, 0x80000000, r0}) getpid() (async) getpgid(r0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4622, 0x1, 0x4, 0x80000000, r0}) (async) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:27 executing program 4: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 00:17:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) write$P9_RGETLOCK(r4, &(0x7f0000000640)={0x1e, 0x37, 0x2, {0x2, 0x5}}, 0x1e) [ 1310.304864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:27 executing program 3: r0 = shmget(0x1, 0x2000, 0xc20, &(0x7f0000ffc000/0x2000)=nil) (async, rerun: 32) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 32) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/7) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r0, 0x40, r1) (async) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/206) 00:17:27 executing program 1: r0 = getpid() getpgid(r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4622, 0x1, 0x4, 0x80000000, r0}) getpid() (async) getpgid(r0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4622, 0x1, 0x4, 0x80000000, r0}) (async) 00:17:27 executing program 4: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) (async) 00:17:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) write$P9_RGETLOCK(r4, &(0x7f0000000640)={0x1e, 0x37, 0x2, {0x2, 0x5}}, 0x1e) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:27 executing program 3: r0 = shmget(0x1, 0x2000, 0xc20, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/7) shmget(0x1, 0x2000, 0xc20, &(0x7f0000ffc000/0x2000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/7) (async) 00:17:27 executing program 4: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 00:17:27 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 00:17:27 executing program 2: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) 00:17:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) write$P9_RGETLOCK(r4, &(0x7f0000000640)={0x1e, 0x37, 0x2, {0x2, 0x5}}, 0x1e) 00:17:27 executing program 4: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x4, 0x4) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:27 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 00:17:27 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/243) 00:17:27 executing program 4: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x4, 0x4) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600), 0x4000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) write$uinput_user_dev(r4, &(0x7f00000006c0)={'syz0\x00', {0x9, 0xff81, 0xc11, 0x400}, 0x23, [0x7fff, 0xb8, 0xfffffffd, 0x2, 0x4, 0xff, 0xd94, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xffffff01, 0x400, 0x80000000, 0x8, 0x377, 0x44e6, 0x8, 0x3, 0x98e, 0x1, 0x7, 0x1, 0x3, 0x79, 0x6, 0x5, 0x2f, 0x40, 0x80000001, 0xfeb3, 0x800, 0x7, 0x5, 0x5, 0x4, 0x9, 0x100, 0x100, 0x2, 0x1004, 0x800, 0x4, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3f, 0xfffffff7, 0x400, 0x1, 0x3, 0x2, 0x5, 0x80, 0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x6e2, 0x5], [0xffffffff, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0xd0, 0xbec, 0x3, 0x1, 0xfffffff8, 0x22fc, 0xfffffff9, 0x3f, 0x0, 0x8000, 0xb7bb, 0x8, 0x8, 0x3, 0x4, 0xffffff7f, 0x80, 0x2, 0x6, 0x6, 0x6, 0x10001, 0x7fff, 0xb93, 0x6, 0x8000, 0x8, 0x9, 0x5, 0x3ff, 0x11d, 0xfff, 0x80000000, 0x2, 0x7c1c, 0x0, 0x6, 0x0, 0xe32, 0x1, 0x10000, 0x3f, 0xff, 0x0, 0x9c0, 0x2, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x4, 0x1000, 0x5c, 0x55, 0x2, 0x9, 0x10000], [0x1, 0x1f, 0x7, 0x3, 0x7, 0x10000, 0xf6, 0x0, 0x4000000, 0x96, 0x100, 0xd047, 0x3f, 0xfffffc00, 0x8, 0x10001, 0x0, 0x600000, 0x101, 0x6, 0x9, 0x6784, 0x6, 0x0, 0x1, 0x6, 0xb1b6, 0x3ff, 0x8, 0x2, 0x8, 0x8, 0x2, 0x401, 0x0, 0x4, 0xfff, 0x9, 0x8000, 0x7fffffff, 0x2, 0x0, 0x9, 0x401, 0xc2a, 0x4, 0x8000, 0x4, 0x7f, 0x4, 0xff, 0xfff, 0x5, 0x7ff, 0x6, 0x5, 0x10000, 0x5, 0x7, 0xd0, 0x9, 0x9, 0x7fff, 0x1], [0x54f, 0x0, 0x0, 0x40, 0xfff, 0x10000, 0x1000, 0x5, 0xfff, 0x2, 0x541, 0x9, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x8, 0x7ff, 0xfffffff9, 0xfffff000, 0x8, 0x3, 0x81, 0x3, 0x5, 0x9, 0x2, 0xfffff001, 0xfffffff9, 0x6, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7ff, 0x101, 0x27c6, 0x83, 0x2, 0x8001, 0x1, 0x8, 0x3, 0x0, 0xfffffffa, 0x697e, 0x81, 0x7f, 0x3, 0x8d2, 0x1, 0x5754b94e, 0x3, 0x6024, 0x9, 0x8]}, 0x45c) 00:17:27 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) (async) 00:17:27 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/243) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/243) (async) 00:17:27 executing program 4: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x4, 0x4) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:28 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/243) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/243) (async) 00:17:28 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) 00:17:28 executing program 4: shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) 00:17:28 executing program 2: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) (async) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) (async) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) (async) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) (async) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) (async) shmctl$SHM_LOCK(r4, 0xb) (async) shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$SHM_LOCK(r6, 0xb) (async) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) (async) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) (async) 00:17:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600), 0x4000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) 00:17:28 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) 00:17:28 executing program 4: shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) (async) 00:17:28 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600), 0x4000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) 00:17:28 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 32) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) (rerun: 32) 00:17:28 executing program 4: shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) (async) 00:17:28 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600), 0x4000) 00:17:28 executing program 2: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) (async) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) (async) shmctl$SHM_LOCK(r4, 0xb) (async, rerun: 64) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) (rerun: 64) shmctl$SHM_LOCK(r6, 0xb) (async) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) (async, rerun: 64) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) (rerun: 64) 00:17:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4d41) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = shmget(0x1, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000001c0)=""/246) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/255) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f00000002c0)=""/234) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 00:17:28 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/9) 00:17:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) 00:17:29 executing program 1: r0 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/2) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/150) r1 = shmget$private(0x0, 0x3000, 0x2c000407, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x3, 0x0, 0xee00, 0xee00, 0xee01, 0x0, 0x4b5b}, 0x1, 0x80, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x4981}) 00:17:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4d41) (async) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r2 = shmget(0x1, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000001c0)=""/246) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/255) (async) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f00000002c0)=""/234) (async) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 00:17:29 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/179) 00:17:29 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/42) 00:17:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) 00:17:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4d41) r1 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r2 = shmget(0x1, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000001c0)=""/246) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/255) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f00000002c0)=""/234) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4d41) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x1, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) (async) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000001c0)=""/246) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/255) (async) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) (async) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f00000002c0)=""/234) (async) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) (async) 00:17:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/179) 00:17:29 executing program 1: r0 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/2) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/150) r1 = shmget$private(0x0, 0x3000, 0x2c000407, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x3, 0x0, 0xee00, 0xee00, 0xee01, 0x0, 0x4b5b}, 0x1, 0x80, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x4981}) shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/2) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/150) (async) shmget$private(0x0, 0x3000, 0x2c000407, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x3, 0x0, 0xee00, 0xee00, 0xee01, 0x0, 0x4b5b}, 0x1, 0x80, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x4981}) (async) 00:17:29 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) 00:17:29 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/42) 00:17:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/179) 00:17:29 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 1: r0 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/2) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/150) (async) r1 = shmget$private(0x0, 0x3000, 0x2c000407, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x3, 0x0, 0xee00, 0xee00, 0xee01, 0x0, 0x4b5b}, 0x1, 0x80, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x4981}) 00:17:29 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = getpid() getpgid(r2) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0xee00, r1, 0x42, 0xff4a}, 0x6, 0xab, 0x0, 0x10000, 0x0, r2, 0x3ff}) 00:17:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) 00:17:29 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/42) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/42) (async) 00:17:29 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/24) 00:17:29 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = getpid() getpgid(r2) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0xee00, r1, 0x42, 0xff4a}, 0x6, 0xab, 0x0, 0x10000, 0x0, r2, 0x3ff}) 00:17:29 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 00:17:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) 00:17:29 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/24) 00:17:29 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = getpid() getpgid(r2) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0xee00, r1, 0x42, 0xff4a}, 0x6, 0xab, 0x0, 0x10000, 0x0, r2, 0x3ff}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) getpid() (async) getpgid(r2) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0xee00, r1, 0x42, 0xff4a}, 0x6, 0xab, 0x0, 0x10000, 0x0, r2, 0x3ff}) (async) 00:17:29 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xc00000, @loopback, 0x3}}}, 0x30) 00:17:29 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 00:17:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 00:17:29 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/24) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/24) (async) 00:17:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xc00000, @loopback, 0x3}}}, 0x30) 00:17:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:29 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:29 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xc00000, @loopback, 0x3}}}, 0x30) 00:17:30 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440c0}, 0x44000) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) r2 = gettid() r3 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee00, 0xee00, 0x0, 0x11, 0x4}, 0xc1, 0x100000001, 0x8, 0x7ff, r2, r3, 0x4}) 00:17:30 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:30 executing program 1: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x2}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/27) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/217) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7ff, 0x8800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:30 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xe80) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) 00:17:30 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440c0}, 0x44000) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) r2 = gettid() r3 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee00, 0xee00, 0x0, 0x11, 0x4}, 0xc1, 0x100000001, 0x8, 0x7ff, r2, r3, 0x4}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440c0}, 0x44000) (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) (async) shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) (async) gettid() (async) getpgid(0xffffffffffffffff) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee00, 0xee00, 0x0, 0x11, 0x4}, 0xc1, 0x100000001, 0x8, 0x7ff, r2, r3, 0x4}) (async) 00:17:30 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) (async, rerun: 64) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 64) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async, rerun: 32) r4 = getpid() (rerun: 32) getpgid(r4) r5 = getpgid(r4) (async) r6 = getpid() getpgid(r6) (async) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) (async, rerun: 64) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) (async, rerun: 64) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:30 executing program 1: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x2}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/27) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/217) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7ff, 0x8800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x2}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/27) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/217) (async) syz_open_dev$sg(&(0x7f0000000000), 0x7ff, 0x8800) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_LOCK(r1, 0xb) (async) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:30 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xe80) (async) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) 00:17:30 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440c0}, 0x44000) (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) (async) shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) (async, rerun: 64) r2 = gettid() (async, rerun: 64) r3 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee00, 0xee00, 0x0, 0x11, 0x4}, 0xc1, 0x100000001, 0x8, 0x7ff, r2, r3, 0x4}) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:30 executing program 1: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000100)={0x5, 0x9, 0x8, 0x2}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/27) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/217) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7ff, 0x8800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_LOCK(r1, 0xb) 00:17:30 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xe80) (async) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 64) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000100)) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$SHM_LOCK(r5, 0xb) 00:17:30 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r1 = geteuid() (async) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r4 = getpid() getpgid(r4) r5 = getpgid(r4) (async) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:30 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/10) 00:17:30 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x88a01) mmap$usbmon(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x4) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:30 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/10) 00:17:30 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x3, 0xee00, r1, 0x0, 0xee01, 0x42, 0x9}, 0x10000, 0x4, 0x51d175fc, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) 00:17:30 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000100)) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$SHM_LOCK(r5, 0xb) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000100)) (async) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r5, 0xb) (async) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) shmctl$SHM_LOCK(r5, 0xb) (async) 00:17:30 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x88a01) mmap$usbmon(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x4) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/10) 00:17:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x3, 0xee00, r1, 0x0, 0xee01, 0x42, 0x9}, 0x10000, 0x4, 0x51d175fc, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) 00:17:30 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/231) r0 = shmget(0x2, 0x11000, 0x8, &(0x7f0000fef000/0x11000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000300)=""/148) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = geteuid() r5 = getpid() r6 = getpgid(r5) r7 = getpid() getpgid(r7) rt_sigreturn() r8 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) r9 = geteuid() shmctl$IPC_SET(r8, 0x1, &(0x7f0000000280)={{0x1, r4, r1, r9, r3, 0xd9, 0x2}, 0x6, 0x1f, 0x0, 0x3c, 0x0, r6, 0x4}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x2, 0xee00, r2, r4, 0xffffffffffffffff, 0x1, 0x2}, 0x39e, 0x3, 0x0, 0x5, r5, r7, 0x8001}) 00:17:30 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000100)) (async) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) (async) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) shmctl$SHM_LOCK(r5, 0xb) 00:17:30 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x88a01) mmap$usbmon(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x4) 00:17:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:30 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 32) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 32) shmctl$SHM_LOCK(r0, 0xb) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x3, 0xee00, r1, 0x0, 0xee01, 0x42, 0x9}, 0x10000, 0x4, 0x51d175fc, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) 00:17:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:30 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/231) (async) r0 = shmget(0x2, 0x11000, 0x8, &(0x7f0000fef000/0x11000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000300)=""/148) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) (async) r4 = geteuid() r5 = getpid() r6 = getpgid(r5) (async) r7 = getpid() getpgid(r7) (async) rt_sigreturn() r8 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) (async) r9 = geteuid() shmctl$IPC_SET(r8, 0x1, &(0x7f0000000280)={{0x1, r4, r1, r9, r3, 0xd9, 0x2}, 0x6, 0x1f, 0x0, 0x3c, 0x0, r6, 0x4}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x2, 0xee00, r2, r4, 0xffffffffffffffff, 0x1, 0x2}, 0x39e, 0x3, 0x0, 0x5, r5, r7, 0x8001}) 00:17:30 executing program 2: shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) 00:17:30 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="76f57178ce0a6c5798835bbf9d763967c780196bc455d68599aa55b941258559f1ce5d4f0d5b2e20a314e70cb865ac27c4187765245bd467ced38f8c68ba76f70824aa30677ff1d0b119bcc6552c7be9778e02380e0c710e7fc0d7727fcecc864794c8ac5b991cb6123905fb48b196ae8b042ae8ea38332da087fa408fa1dcd85beb09ae9e31fc5ef9995d6df8810d17fca7cacdbeaca69d5e27dfea60bb77bd349cc9308d99f75d78435cb15c63d439b21abbe9ae3148ef08bd512bf1a0e585693e622ecb5687eae46bc5ced385774936954b73e84dc15b94f8", 0xda, 0x40040, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) 00:17:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:31 executing program 2: shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) (async) 00:17:31 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="76f57178ce0a6c5798835bbf9d763967c780196bc455d68599aa55b941258559f1ce5d4f0d5b2e20a314e70cb865ac27c4187765245bd467ced38f8c68ba76f70824aa30677ff1d0b119bcc6552c7be9778e02380e0c710e7fc0d7727fcecc864794c8ac5b991cb6123905fb48b196ae8b042ae8ea38332da087fa408fa1dcd85beb09ae9e31fc5ef9995d6df8810d17fca7cacdbeaca69d5e27dfea60bb77bd349cc9308d99f75d78435cb15c63d439b21abbe9ae3148ef08bd512bf1a0e585693e622ecb5687eae46bc5ced385774936954b73e84dc15b94f8", 0xda, 0x40040, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) (async) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="76f57178ce0a6c5798835bbf9d763967c780196bc455d68599aa55b941258559f1ce5d4f0d5b2e20a314e70cb865ac27c4187765245bd467ced38f8c68ba76f70824aa30677ff1d0b119bcc6552c7be9778e02380e0c710e7fc0d7727fcecc864794c8ac5b991cb6123905fb48b196ae8b042ae8ea38332da087fa408fa1dcd85beb09ae9e31fc5ef9995d6df8810d17fca7cacdbeaca69d5e27dfea60bb77bd349cc9308d99f75d78435cb15c63d439b21abbe9ae3148ef08bd512bf1a0e585693e622ecb5687eae46bc5ced385774936954b73e84dc15b94f8", 0xda, 0x40040, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) (async) 00:17:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:31 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:31 executing program 3: socket$alg(0x26, 0x5, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:31 executing program 2: shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) (async) 00:17:31 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/231) (async, rerun: 64) r0 = shmget(0x2, 0x11000, 0x8, &(0x7f0000fef000/0x11000)=nil) (rerun: 64) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000300)=""/148) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) (async) r4 = geteuid() (async) r5 = getpid() r6 = getpgid(r5) (async, rerun: 32) r7 = getpid() (rerun: 32) getpgid(r7) (async) rt_sigreturn() r8 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) r9 = geteuid() shmctl$IPC_SET(r8, 0x1, &(0x7f0000000280)={{0x1, r4, r1, r9, r3, 0xd9, 0x2}, 0x6, 0x1f, 0x0, 0x3c, 0x0, r6, 0x4}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x2, 0xee00, r2, r4, 0xffffffffffffffff, 0x1, 0x2}, 0x39e, 0x3, 0x0, 0x5, r5, r7, 0x8001}) 00:17:31 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="76f57178ce0a6c5798835bbf9d763967c780196bc455d68599aa55b941258559f1ce5d4f0d5b2e20a314e70cb865ac27c4187765245bd467ced38f8c68ba76f70824aa30677ff1d0b119bcc6552c7be9778e02380e0c710e7fc0d7727fcecc864794c8ac5b991cb6123905fb48b196ae8b042ae8ea38332da087fa408fa1dcd85beb09ae9e31fc5ef9995d6df8810d17fca7cacdbeaca69d5e27dfea60bb77bd349cc9308d99f75d78435cb15c63d439b21abbe9ae3148ef08bd512bf1a0e585693e622ecb5687eae46bc5ced385774936954b73e84dc15b94f8", 0xda, 0x40040, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) (async) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="76f57178ce0a6c5798835bbf9d763967c780196bc455d68599aa55b941258559f1ce5d4f0d5b2e20a314e70cb865ac27c4187765245bd467ced38f8c68ba76f70824aa30677ff1d0b119bcc6552c7be9778e02380e0c710e7fc0d7727fcecc864794c8ac5b991cb6123905fb48b196ae8b042ae8ea38332da087fa408fa1dcd85beb09ae9e31fc5ef9995d6df8810d17fca7cacdbeaca69d5e27dfea60bb77bd349cc9308d99f75d78435cb15c63d439b21abbe9ae3148ef08bd512bf1a0e585693e622ecb5687eae46bc5ced385774936954b73e84dc15b94f8", 0xda, 0x40040, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) (async) 00:17:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:31 executing program 3: socket$alg(0x26, 0x5, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fce05e6e64028ef5f1cc5a41ae15961fff3001e9309927cf1bf99782e768876f"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}]}, 0x6c}}, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:31 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fce05e6e64028ef5f1cc5a41ae15961fff3001e9309927cf1bf99782e768876f"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}]}, 0x6c}}, 0x0) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:31 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 00:17:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7000003, 0x8010, r0, 0x1) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) 00:17:32 executing program 3: socket$alg(0x26, 0x5, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 00:17:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:32 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7000003, 0x8010, r0, 0x1) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) 00:17:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fce05e6e64028ef5f1cc5a41ae15961fff3001e9309927cf1bf99782e768876f"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}]}, 0x6c}}, 0x0) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (rerun: 64) 00:17:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffee0700", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf250700000014000200fc020000000000000000000000000000080005007f000001"], 0x30}}, 0x4000010) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x8, 0x70bd2e, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x44}}, 0x4008085) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004400) 00:17:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:32 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) (async) 00:17:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7000003, 0x8010, r0, 0x1) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) 00:17:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffee0700", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf250700000014000200fc020000000000000000000000000000080005007f000001"], 0x30}}, 0x4000010) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x8, 0x70bd2e, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x44}}, 0x4008085) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffee0700", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf250700000014000200fc020000000000000000000000000000080005007f000001"], 0x30}}, 0x4000010) (async) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x8, 0x70bd2e, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x44}}, 0x4008085) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004400) (async) 00:17:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:32 executing program 2: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffa000/0x2000)=nil) 00:17:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:32 executing program 4: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = getegid() r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee01, r1, 0x194, 0x800}, 0x1, 0x800, 0x1, 0x5, r2, 0x0, 0x13eb}) 00:17:32 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0001) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x8085) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffee0700", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf250700000014000200fc020000000000000000000000000000080005007f000001"], 0x30}}, 0x4000010) (async) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x8, 0x70bd2e, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x44}}, 0x4008085) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004400) 00:17:32 executing program 2: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffa000/0x2000)=nil) (async) 00:17:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:32 executing program 4: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = getegid() r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee01, r1, 0x194, 0x800}, 0x1, 0x800, 0x1, 0x5, r2, 0x0, 0x13eb}) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) getegid() (async) getpid() (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee01, r1, 0x194, 0x800}, 0x1, 0x800, 0x1, 0x5, r2, 0x0, 0x13eb}) (async) 00:17:32 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0001) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x8085) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0001) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x8085) (async) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:32 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/7) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 00:17:32 executing program 2: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffa000/0x2000)=nil) (async) 00:17:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:32 executing program 4: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = getegid() (async) r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee01, r1, 0x194, 0x800}, 0x1, 0x800, 0x1, 0x5, r2, 0x0, 0x13eb}) 00:17:32 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget(0x2, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/61) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/4096) 00:17:32 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/101) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/230) 00:17:32 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/7) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 00:17:32 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0001) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x8085) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async, rerun: 64) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (rerun: 64) 00:17:33 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:33 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ff9000/0x3000)=nil) (async) r0 = shmget(0x2, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/61) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/4096) 00:17:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:33 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/7) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/7) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) 00:17:33 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/101) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/230) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff9000/0x3000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/101) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/230) (async) 00:17:33 executing program 1: r0 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) 00:17:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:33 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget(0x2, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/61) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/4096) 00:17:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:33 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/25) 00:17:33 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/101) (async, rerun: 64) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/230) (rerun: 64) 00:17:33 executing program 1: r0 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) shmget(0x3, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:34 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000140)=""/205, 0xcd) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) write$proc_mixer(r0, &(0x7f0000000000)=[{'PHONEOUT', @void}, {'CD', @void}, {'PHONEIN', @void}, {'IMIX', @void}, {'IMIX', @void}, {'LINE1', @val={' \'', 'Line'}}], 0x40) 00:17:34 executing program 5: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = getegid() r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee01, r1, 0x194, 0x800}, 0x1, 0x800, 0x1, 0x5, r2, 0x0, 0x13eb}) 00:17:34 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 32) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/25) (rerun: 32) 00:17:34 executing program 1: r0 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/9) 00:17:34 executing program 4: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:34 executing program 1: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x2) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@rose, @default, @null, @bcast, @rose, @netrom, @null, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x1, @bcast, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x100, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7fffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x51c8) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x51c8) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xa) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x51c8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x99d1e) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) accept4$netrom(r4, 0x0, &(0x7f0000000000), 0x80000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)) 00:17:34 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000140)=""/205, 0xcd) (async, rerun: 64) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async, rerun: 64) write$proc_mixer(r0, &(0x7f0000000000)=[{'PHONEOUT', @void}, {'CD', @void}, {'PHONEIN', @void}, {'IMIX', @void}, {'IMIX', @void}, {'LINE1', @val={' \'', 'Line'}}], 0x40) 00:17:34 executing program 5: shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffa000/0x2000)=nil) 00:17:34 executing program 4: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:34 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7000003, 0x8010, r0, 0x1) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) 00:17:34 executing program 4: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:34 executing program 0: syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:34 executing program 1: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x2) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@rose, @default, @null, @bcast, @rose, @netrom, @null, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x1, @bcast, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x100, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7fffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x51c8) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x51c8) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xa) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x51c8) (async) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x99d1e) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) accept4$netrom(r4, 0x0, &(0x7f0000000000), 0x80000) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)) 00:17:34 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000140)=""/205, 0xcd) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) write$proc_mixer(r0, &(0x7f0000000000)=[{'PHONEOUT', @void}, {'CD', @void}, {'PHONEIN', @void}, {'IMIX', @void}, {'IMIX', @void}, {'LINE1', @val={' \'', 'Line'}}], 0x40) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) (async) read$proc_mixer(r0, &(0x7f0000000140)=""/205, 0xcd) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) write$proc_mixer(r0, &(0x7f0000000000)=[{'PHONEOUT', @void}, {'CD', @void}, {'PHONEIN', @void}, {'IMIX', @void}, {'IMIX', @void}, {'LINE1', @val={' \'', 'Line'}}], 0x40) (async) 00:17:34 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/25) 00:17:34 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7000003, 0x8010, r0, 0x1) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) 00:17:34 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) r1 = geteuid() write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x2010, {0x8, 0x0, 0x1}, 0x22, r1, 0xee00, 0x9, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, 0x401, 0x9, 0x8, 0x8, 0x7, 0x9, 0x1, 0x1}}, 0xa0) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffb000/0x2000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}}}, 0x118) 00:17:34 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:17:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)={0x0, "2117e83adeaf3a935a07af5c16173cb8707702a911c8ca099163b93f317b582cff64ea26cd1b9e1f596283c9e6618c239932e1359ae68041af8600a21a8a8606"}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:35 executing program 0: syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:35 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) (async) r1 = geteuid() write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x2010, {0x8, 0x0, 0x1}, 0x22, r1, 0xee00, 0x9, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, 0x401, 0x9, 0x8, 0x8, 0x7, 0x9, 0x1, 0x1}}, 0xa0) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffb000/0x2000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}}}, 0x118) 00:17:35 executing program 1: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x2) (async) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@rose, @default, @null, @bcast, @rose, @netrom, @null, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x1, @bcast, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x100, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7fffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x51c8) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x51c8) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xa) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x51c8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x99d1e) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) accept4$netrom(r4, 0x0, &(0x7f0000000000), 0x80000) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)) 00:17:35 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) 00:17:35 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/231) r0 = shmget(0x2, 0x11000, 0x8, &(0x7f0000fef000/0x11000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000300)=""/148) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = geteuid() r5 = getpid() r6 = getpgid(r5) r7 = getpid() getpgid(r7) rt_sigreturn() r8 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) r9 = geteuid() shmctl$IPC_SET(r8, 0x1, &(0x7f0000000280)={{0x1, r4, r1, r9, r3, 0xd9, 0x2}, 0x6, 0x1f, 0x0, 0x3c, 0x0, r6, 0x4}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x2, 0xee00, r2, r4, 0xffffffffffffffff, 0x1, 0x2}, 0x39e, 0x3, 0x0, 0x5, r5, r7, 0x8001}) 00:17:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)={0x0, "2117e83adeaf3a935a07af5c16173cb8707702a911c8ca099163b93f317b582cff64ea26cd1b9e1f596283c9e6618c239932e1359ae68041af8600a21a8a8606"}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r2) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:35 executing program 0: syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:35 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7}, 0x7) r1 = geteuid() write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x2010, {0x8, 0x0, 0x1}, 0x22, r1, 0xee00, 0x9, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, 0x401, 0x9, 0x8, 0x8, 0x7, 0x9, 0x1, 0x1}}, 0xa0) (async) shmget$private(0x0, 0x2000, 0x78001842, &(0x7f0000ffb000/0x2000)=nil) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}}}, 0x118) 00:17:35 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/201) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) 00:17:35 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) 00:17:35 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000006c0)) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000100)) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$SHM_LOCK(r5, 0xb) 00:17:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:17:35 executing program 4: shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:35 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/201) (async) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) 00:17:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)={0x0, "2117e83adeaf3a935a07af5c16173cb8707702a911c8ca099163b93f317b582cff64ea26cd1b9e1f596283c9e6618c239932e1359ae68041af8600a21a8a8606"}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r2) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:35 executing program 2: write$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=[{'BASS', @void}, {'OGAIN', @void}, {'LINE1', @void}, {'LINE1', @void}, {'PHONEIN', @val={' \'', 'Master Capture Switch'}}], 0x4c) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/130) 00:17:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:17:35 executing program 4: shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) (async) 00:17:35 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/56) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/109) 00:17:35 executing program 2: write$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=[{'BASS', @void}, {'OGAIN', @void}, {'LINE1', @void}, {'LINE1', @void}, {'PHONEIN', @val={' \'', 'Master Capture Switch'}}], 0x4c) (async, rerun: 64) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffb000/0x1000)=nil) (async, rerun: 64) r0 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/130) 00:17:35 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/201) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/201) (async) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) (async) 00:17:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:17:35 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:17:35 executing program 4: shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:35 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async, rerun: 64) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/56) (rerun: 64) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/109) 00:17:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={0x0, 0x0, 0x5}) 00:17:35 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/7) 00:17:35 executing program 2: write$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=[{'BASS', @void}, {'OGAIN', @void}, {'LINE1', @void}, {'LINE1', @void}, {'PHONEIN', @val={' \'', 'Master Capture Switch'}}], 0x4c) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/130) write$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=[{'BASS', @void}, {'OGAIN', @void}, {'LINE1', @void}, {'LINE1', @void}, {'PHONEIN', @val={' \'', 'Master Capture Switch'}}], 0x4c) (async) shmget$private(0x0, 0x1000, 0x78001842, &(0x7f0000ffb000/0x1000)=nil) (async) shmget(0x1, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) (async) shmget(0x3, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/130) (async) 00:17:35 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:35 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/7) 00:17:35 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) 00:17:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000005c0)={0x0}) 00:17:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:35 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:35 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/7) 00:17:35 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/56) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/109) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/56) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/109) (async) 00:17:35 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:35 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:35 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:35 executing program 1: r0 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/243) shmctl$SHM_LOCK(r1, 0xb) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000180)=""/133) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/242) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/12) 00:17:35 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x0) 00:17:35 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) 00:17:35 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:35 executing program 1: r0 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/243) (async) shmctl$SHM_LOCK(r1, 0xb) (async, rerun: 32) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) (rerun: 32) shmctl$SHM_LOCK(r3, 0xb) (async, rerun: 32) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (rerun: 32) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000180)=""/133) (async) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) (async) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/242) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) (async) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/12) 00:17:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) 00:17:35 executing program 3: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/2) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xd5, 0x7ff}, 0x1, 0xee, 0x100, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) 00:17:35 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x0) (async) 00:17:35 executing program 2: shmget$private(0x0, 0x4000, 0x1448, &(0x7f0000ff8000/0x4000)=nil) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, 0x0, 0xee01, 0x20, 0x7}, 0x5, 0x5, 0x0, 0x7, 0x0, r4, 0x1f}) 00:17:36 executing program 3: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/2) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xd5, 0x7ff}, 0x1, 0xee, 0x100, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/2) (async) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xd5, 0x7ff}, 0x1, 0xee, 0x100, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) (async) 00:17:36 executing program 1: r0 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/243) shmctl$SHM_LOCK(r1, 0xb) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000180)=""/133) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/242) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/12) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) (async) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/243) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) (async) shmctl$SHM_LOCK(r3, 0xb) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000180)=""/133) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r5, 0xb) (async) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/242) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) (async) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/12) (async) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) r2 = getpid() getpgid(r2) r3 = getpid() process_vm_writev(r3, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x0) 00:17:36 executing program 2: shmget$private(0x0, 0x4000, 0x1448, &(0x7f0000ff8000/0x4000)=nil) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getpid() getpgid(r4) r5 = getpgid(r4) r6 = getpid() getpgid(r6) r7 = getpid() process_vm_writev(r7, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x3, r1, r3, r1, r2, 0x20, 0x2}, 0x7f, 0x3, 0x3, 0x81, r5, r6, 0x2}) 00:17:36 executing program 4: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:36 executing program 3: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/2) (async) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xd5, 0x7ff}, 0x1, 0xee, 0x100, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) 00:17:36 executing program 2: shmget$private(0x0, 0x4000, 0x1448, &(0x7f0000ff8000/0x4000)=nil) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) r2 = getpid() getpgid(r2) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) r2 = getpid() getpgid(r2) r3 = getpid() process_vm_writev(r3, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 1: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x1}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff3000/0x3000)=nil) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1) 00:17:36 executing program 4: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xf4af881cfb3556b3, 0x8}}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) getpid() process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 1: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x1}) (async) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff3000/0x3000)=nil) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) r2 = getpid() getpgid(r2) getpid() 00:17:36 executing program 4: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 00:17:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xf4af881cfb3556b3, 0x8}}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xf4af881cfb3556b3, 0x8}}, 0x20) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:36 executing program 1: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:36 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x217481) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) r2 = getpid() getpgid(r2) 00:17:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x1}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff3000/0x3000)=nil) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x1}) (async) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff3000/0x3000)=nil) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1) (async) 00:17:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xf4af881cfb3556b3, 0x8}}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0xf4af881cfb3556b3, 0x8}}, 0x20) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) 00:17:36 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) 00:17:36 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x217481) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getpid() process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/15) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) getpid() 00:17:36 executing program 3: ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x4}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xe2462) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) 00:17:36 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) (async) 00:17:36 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x217481) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x217481) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/15) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x2, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/15) (async) 00:17:36 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/35) 00:17:36 executing program 3: ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x4}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xe2462) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x4}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xe2462) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) (async) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) getpgid(r1) 00:17:36 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x46382) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/13, &(0x7f00000000c0)=0xd) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/15) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = getpid() getpgid(r1) 00:17:36 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 3: ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x4}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xe2462) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x4}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xe2462) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) (async) 00:17:36 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/42) shmget(0x3, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) 00:17:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getpid() 00:17:36 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) (async) 00:17:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:36 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) (async) 00:17:37 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x46382) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/13, &(0x7f00000000c0)=0xd) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:37 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/42) (async) shmget(0x3, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) 00:17:37 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000000) 00:17:37 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 00:17:37 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/12) 00:17:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() 00:17:37 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:37 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000000) (async) 00:17:37 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/42) (async) shmget(0x3, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) 00:17:37 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/12) 00:17:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:38 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x46382) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/13, &(0x7f00000000c0)=0xd) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:38 executing program 5: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001040)={0x81, {0x3, 0x9, 0x4, 0x401, 0x1000, 0x6}}) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/4096) 00:17:38 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000000) 00:17:38 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/12) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/12) (async) 00:17:38 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:38 executing program 0: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) (async) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001040)={0x81, {0x3, 0x9, 0x4, 0x401, 0x1000, 0x6}}) (async) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/4096) 00:17:38 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/9) 00:17:38 executing program 5: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:38 executing program 0: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:38 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x800, 'syz0\x00', @bcast, 0x5, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:39 executing program 0: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:39 executing program 4: shmget$private(0x0, 0x1000, 0x128, &(0x7f0000fff000/0x1000)=nil) 00:17:39 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/9) 00:17:39 executing program 5: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) (async, rerun: 64) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 64) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001040)={0x81, {0x3, 0x9, 0x4, 0x401, 0x1000, 0x6}}) (async) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/4096) 00:17:39 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x800, 'syz0\x00', @bcast, 0x5, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:39 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/9) 00:17:39 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x9, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:39 executing program 4: shmget$private(0x0, 0x1000, 0x128, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x128, &(0x7f0000fff000/0x1000)=nil) (async) 00:17:39 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), 0x4) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x800, 'syz0\x00', @bcast, 0x5, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) 00:17:39 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ff8000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) 00:17:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:39 executing program 4: shmget$private(0x0, 0x1000, 0x128, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x128, &(0x7f0000fff000/0x1000)=nil) (async) 00:17:39 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}], 0x8, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001040)={0x81, {0x3, 0x9, 0x4, 0x401, 0x1000, 0x6}}) r2 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/4096) 00:17:39 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ff8000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) (async) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) 00:17:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000010) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x40001) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000) 00:17:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:39 executing program 4: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) 00:17:39 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}], 0x7, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:39 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ff8000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) (async) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) 00:17:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a02) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/204, 0xcc}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000010) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x40001) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000010) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x40001) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000) (async) 00:17:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:40 executing program 4: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/200, 0xc8}], 0x6, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 1: ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x4}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xe2462) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/9) 00:17:40 executing program 2: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/91) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0x9, 0x100, 0x3, 0x9}) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/191) 00:17:40 executing program 4: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) 00:17:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000010) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x40001) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000) 00:17:40 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x341f, {0xb, 0x4, 0x4}, 0x143, 0x0, r1, 0x1ff, 0x126, 0x401, 0xfffffffffffffffd, 0xffffffffffffff0e, 0x9, 0x8f7, 0xffffffffffffffff, 0x3, 0x31, 0x6, 0x5, 0x2, 0x6, 0x64b4}}, 0xa0) shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:40 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/94) 00:17:40 executing program 1: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/15) 00:17:40 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:40 executing program 2: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil) (async) r0 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/91) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async, rerun: 32) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) (rerun: 32) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0x9, 0x100, 0x3, 0x9}) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/191) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)}], 0x4, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) (async) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x341f, {0xb, 0x4, 0x4}, 0x143, 0x0, r1, 0x1ff, 0x126, 0x401, 0xfffffffffffffffd, 0xffffffffffffff0e, 0x9, 0x8f7, 0xffffffffffffffff, 0x3, 0x31, 0x6, 0x5, 0x2, 0x6, 0x64b4}}, 0xa0) shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:40 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/94) 00:17:40 executing program 1: shmget$private(0x0, 0x4000, 0x1448, &(0x7f0000ff8000/0x4000)=nil) 00:17:40 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xfff, 0x1, 0x3}) 00:17:40 executing program 2: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/91) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0x9, 0x100, 0x3, 0x9}) (async) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/191) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/233, 0xe9}], 0x3, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/94) 00:17:40 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) (async) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x341f, {0xb, 0x4, 0x4}, 0x143, 0x0, r1, 0x1ff, 0x126, 0x401, 0xfffffffffffffffd, 0xffffffffffffff0e, 0x9, 0x8f7, 0xffffffffffffffff, 0x3, 0x31, 0x6, 0x5, 0x2, 0x6, 0x64b4}}, 0xa0) (async) shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ffb000/0x3000)=nil) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}, {&(0x7f0000000280)}], 0x2, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 1: r0 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/243) shmctl$SHM_LOCK(r1, 0xb) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000180)=""/133) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/242) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/32) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/12) 00:17:40 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 00:17:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d0a93655fdce2f04f1b4fc77ea8a2d7723ae56dabc64c5233e82403050ec04651537eea7700118310c49a6183a47adf2a4bb9a08c6573a756601cab8c89e8692398e5c973c7b268ecda91e3f37fbf9959c9eaf8c66b6cdb91ed69816f7e754b43ac7cb4f1af008817ebe35c115673757203ea7d3fb94222db742c84c8f97cbcc8391cef708c31d4e4eafb8a16c1c69d4ee281b8ddbf93ff5aeb81afed9c321e9ab37aa790d958808caaae766ce849ca1bc4c7511d123994e969857fdc4ada511a73745175d09bcee7e36fe689763716ca52e36044e3cec9d25e8f2d0", 0xdc}, {&(0x7f0000000100)="c365d60b890e6e5acd9290f4dcef46830f9f888aa10f1c4c64438948455ec50cffe013c006bf8178510487c2278fd5ce22707211dee8dc51c343aa", 0x3b}], 0x2, &(0x7f0000000180)=[@iv={0x78, 0x117, 0x2, 0x5f, "9ed680b43e80285e44bf07ef5284aa94b808a885185b5e12bb3d4d098380b988185618d234f531123408e57b6b5ede3880bdf3cda8b3718eb9f74ff64954114c63f0fe2733c977d8847fb9f58ae0ea3665f9fb6e2763669575f64845e822bd"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf0, 0x117, 0x2, 0xd9, "35ff1a47214526ea8bb2319297119a1151cb9cd7faa729d8c5cc859aea001b7ca5dc4674e194511909a66cbe954882b18c585ac4fb1933707f6c92abada81a013838f81808d5a12675854b1e51b0c3e0a52fdbce1a281503f05950599b75284704dd6485f3a33c79c8fa667453a6e8784bc4972a3db34c2d71e96af14ee72805835ed6fd1f08820a073a3cab14c48ec9bd74c503e11147d3b5405bd2e94eca76216b541fe39569182c02f10a111c2bff80aaa6a2cf47ae8832395245fe8a73077e50743c5a80e806eb83e6172ee6b9cbfdb758d772ed363bae"}, @iv={0x28, 0x117, 0x2, 0x13, "f09bd8b86342b66e3a8077cb35fbbacabb8bf9"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0x20000004}, 0x400c) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:40 executing program 3: r0 = shmget(0x3, 0x4000, 0x801, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) 00:17:40 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x54, 0x7d, 0x1, {{0x0, 0x3c, 0x40, 0x0, {0x20, 0x3, 0x4}, 0x43a10000, 0x1, 0x6, 0x9, 0x5, '^%-*-', 0x0, '', 0x2, 'w.', 0x2, '+\\'}, 0x3, '].#', 0xee00, r0, 0xee01}}, 0x54) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:17:40 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}], 0x1, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 3: r0 = shmget(0x3, 0x4000, 0x801, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) shmget(0x3, 0x4000, 0x801, &(0x7f0000ffc000/0x4000)=nil) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) (async) 00:17:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d0a93655fdce2f04f1b4fc77ea8a2d7723ae56dabc64c5233e82403050ec04651537eea7700118310c49a6183a47adf2a4bb9a08c6573a756601cab8c89e8692398e5c973c7b268ecda91e3f37fbf9959c9eaf8c66b6cdb91ed69816f7e754b43ac7cb4f1af008817ebe35c115673757203ea7d3fb94222db742c84c8f97cbcc8391cef708c31d4e4eafb8a16c1c69d4ee281b8ddbf93ff5aeb81afed9c321e9ab37aa790d958808caaae766ce849ca1bc4c7511d123994e969857fdc4ada511a73745175d09bcee7e36fe689763716ca52e36044e3cec9d25e8f2d0", 0xdc}, {&(0x7f0000000100)="c365d60b890e6e5acd9290f4dcef46830f9f888aa10f1c4c64438948455ec50cffe013c006bf8178510487c2278fd5ce22707211dee8dc51c343aa", 0x3b}], 0x2, &(0x7f0000000180)=[@iv={0x78, 0x117, 0x2, 0x5f, "9ed680b43e80285e44bf07ef5284aa94b808a885185b5e12bb3d4d098380b988185618d234f531123408e57b6b5ede3880bdf3cda8b3718eb9f74ff64954114c63f0fe2733c977d8847fb9f58ae0ea3665f9fb6e2763669575f64845e822bd"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf0, 0x117, 0x2, 0xd9, "35ff1a47214526ea8bb2319297119a1151cb9cd7faa729d8c5cc859aea001b7ca5dc4674e194511909a66cbe954882b18c585ac4fb1933707f6c92abada81a013838f81808d5a12675854b1e51b0c3e0a52fdbce1a281503f05950599b75284704dd6485f3a33c79c8fa667453a6e8784bc4972a3db34c2d71e96af14ee72805835ed6fd1f08820a073a3cab14c48ec9bd74c503e11147d3b5405bd2e94eca76216b541fe39569182c02f10a111c2bff80aaa6a2cf47ae8832395245fe8a73077e50743c5a80e806eb83e6172ee6b9cbfdb758d772ed363bae"}, @iv={0x28, 0x117, 0x2, 0x13, "f09bd8b86342b66e3a8077cb35fbbacabb8bf9"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0x20000004}, 0x400c) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) accept4$alg(r0, 0x0, 0x0, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d0a93655fdce2f04f1b4fc77ea8a2d7723ae56dabc64c5233e82403050ec04651537eea7700118310c49a6183a47adf2a4bb9a08c6573a756601cab8c89e8692398e5c973c7b268ecda91e3f37fbf9959c9eaf8c66b6cdb91ed69816f7e754b43ac7cb4f1af008817ebe35c115673757203ea7d3fb94222db742c84c8f97cbcc8391cef708c31d4e4eafb8a16c1c69d4ee281b8ddbf93ff5aeb81afed9c321e9ab37aa790d958808caaae766ce849ca1bc4c7511d123994e969857fdc4ada511a73745175d09bcee7e36fe689763716ca52e36044e3cec9d25e8f2d0", 0xdc}, {&(0x7f0000000100)="c365d60b890e6e5acd9290f4dcef46830f9f888aa10f1c4c64438948455ec50cffe013c006bf8178510487c2278fd5ce22707211dee8dc51c343aa", 0x3b}], 0x2, &(0x7f0000000180)=[@iv={0x78, 0x117, 0x2, 0x5f, "9ed680b43e80285e44bf07ef5284aa94b808a885185b5e12bb3d4d098380b988185618d234f531123408e57b6b5ede3880bdf3cda8b3718eb9f74ff64954114c63f0fe2733c977d8847fb9f58ae0ea3665f9fb6e2763669575f64845e822bd"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf0, 0x117, 0x2, 0xd9, "35ff1a47214526ea8bb2319297119a1151cb9cd7faa729d8c5cc859aea001b7ca5dc4674e194511909a66cbe954882b18c585ac4fb1933707f6c92abada81a013838f81808d5a12675854b1e51b0c3e0a52fdbce1a281503f05950599b75284704dd6485f3a33c79c8fa667453a6e8784bc4972a3db34c2d71e96af14ee72805835ed6fd1f08820a073a3cab14c48ec9bd74c503e11147d3b5405bd2e94eca76216b541fe39569182c02f10a111c2bff80aaa6a2cf47ae8832395245fe8a73077e50743c5a80e806eb83e6172ee6b9cbfdb758d772ed363bae"}, @iv={0x28, 0x117, 0x2, 0x13, "f09bd8b86342b66e3a8077cb35fbbacabb8bf9"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0x20000004}, 0x400c) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:40 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x54, 0x7d, 0x1, {{0x0, 0x3c, 0x40, 0x0, {0x20, 0x3, 0x4}, 0x43a10000, 0x1, 0x6, 0x9, 0x5, '^%-*-', 0x0, '', 0x2, 'w.', 0x2, '+\\'}, 0x3, '].#', 0xee00, r0, 0xee01}}, 0x54) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:40 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780), 0x0, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) 00:17:40 executing program 3: r0 = shmget(0x3, 0x4000, 0x801, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) 00:17:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d0a93655fdce2f04f1b4fc77ea8a2d7723ae56dabc64c5233e82403050ec04651537eea7700118310c49a6183a47adf2a4bb9a08c6573a756601cab8c89e8692398e5c973c7b268ecda91e3f37fbf9959c9eaf8c66b6cdb91ed69816f7e754b43ac7cb4f1af008817ebe35c115673757203ea7d3fb94222db742c84c8f97cbcc8391cef708c31d4e4eafb8a16c1c69d4ee281b8ddbf93ff5aeb81afed9c321e9ab37aa790d958808caaae766ce849ca1bc4c7511d123994e969857fdc4ada511a73745175d09bcee7e36fe689763716ca52e36044e3cec9d25e8f2d0", 0xdc}, {&(0x7f0000000100)="c365d60b890e6e5acd9290f4dcef46830f9f888aa10f1c4c64438948455ec50cffe013c006bf8178510487c2278fd5ce22707211dee8dc51c343aa", 0x3b}], 0x2, &(0x7f0000000180)=[@iv={0x78, 0x117, 0x2, 0x5f, "9ed680b43e80285e44bf07ef5284aa94b808a885185b5e12bb3d4d098380b988185618d234f531123408e57b6b5ede3880bdf3cda8b3718eb9f74ff64954114c63f0fe2733c977d8847fb9f58ae0ea3665f9fb6e2763669575f64845e822bd"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf0, 0x117, 0x2, 0xd9, "35ff1a47214526ea8bb2319297119a1151cb9cd7faa729d8c5cc859aea001b7ca5dc4674e194511909a66cbe954882b18c585ac4fb1933707f6c92abada81a013838f81808d5a12675854b1e51b0c3e0a52fdbce1a281503f05950599b75284704dd6485f3a33c79c8fa667453a6e8784bc4972a3db34c2d71e96af14ee72805835ed6fd1f08820a073a3cab14c48ec9bd74c503e11147d3b5405bd2e94eca76216b541fe39569182c02f10a111c2bff80aaa6a2cf47ae8832395245fe8a73077e50743c5a80e806eb83e6172ee6b9cbfdb758d772ed363bae"}, @iv={0x28, 0x117, 0x2, 0x13, "f09bd8b86342b66e3a8077cb35fbbacabb8bf9"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0x20000004}, 0x400c) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:40 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x54, 0x7d, 0x1, {{0x0, 0x3c, 0x40, 0x0, {0x20, 0x3, 0x4}, 0x43a10000, 0x1, 0x6, 0x9, 0x5, '^%-*-', 0x0, '', 0x2, 'w.', 0x2, '+\\'}, 0x3, '].#', 0xee00, r0, 0xee01}}, 0x54) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:40 executing program 5: process_vm_writev(0x0, &(0x7f0000001780), 0x0, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:40 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) 00:17:40 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0xfff, 0x1, 0x3}) 00:17:40 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/24) 00:17:41 executing program 4: shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x5, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x386a) 00:17:41 executing program 2: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) 00:17:41 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) 00:17:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0xfff, 0x1, 0x3}) 00:17:41 executing program 5: process_vm_writev(0x0, &(0x7f0000001780), 0x0, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/121, 0x79}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b40)=""/220, 0xdc}, {&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/189, 0xbd}], 0x8, 0x0) 00:17:41 executing program 2: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) 00:17:41 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)) 00:17:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0xfff, 0x1, 0x3}) 00:17:41 executing program 4: shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x5, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x386a) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) (async) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x5, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) (async) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x386a) (async) 00:17:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xae397) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x4004556b, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000540), 0x2, 0x801) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r2, 0x5) pipe2$9p(&(0x7f0000000600), 0x4000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000b80)) 00:17:41 executing program 5: process_vm_writev(0x0, &(0x7f0000001780)=[{0xfffffffffffffffc}], 0x1, 0x0, 0x0, 0x0) 00:17:41 executing program 2: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) 00:17:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0xfff, 0x1, 0x3}) 00:17:41 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) 00:17:41 executing program 4: shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x5, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x386a) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) (async) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x51c8) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x5, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) (async) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x386a) (async) 00:17:41 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/244) 00:17:41 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 00:17:41 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff8000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x2) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) shmget(0x2, 0x4000, 0xc0, &(0x7f0000ff7000/0x4000)=nil) 00:17:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1, 0x3}) 00:17:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) 00:17:41 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 00:17:41 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/244) 00:17:41 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff8000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) (async) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x2) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) shmget(0x2, 0x4000, 0xc0, &(0x7f0000ff7000/0x4000)=nil) 00:17:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x3}) 00:17:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) (rerun: 64) 00:17:42 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 00:17:42 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/244) 00:17:42 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) 00:17:42 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff8000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x2) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) shmget(0x2, 0x4000, 0xc0, &(0x7f0000ff7000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff8000/0x1000)=nil) (async) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) (async) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x2) (async) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4) (async) shmget(0x2, 0x4000, 0xc0, &(0x7f0000ff7000/0x4000)=nil) (async) 00:17:42 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1}) 00:17:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) 00:17:42 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) 00:17:42 executing program 3: r0 = shmget(0x1, 0x2000, 0xc20, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/7) 00:17:42 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = getpid() getpgid(r1) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0x7f}, 0x7, 0xfffffffffffff299, 0x81, 0x9, 0xffffffffffffffff, r1, 0x2}) 00:17:42 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/144) 00:17:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:42 executing program 5: shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) 00:17:42 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) 00:17:43 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000000)=""/37) 00:17:43 executing program 3: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:43 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = getpid() getpgid(r1) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0x7f}, 0x7, 0xfffffffffffff299, 0x81, 0x9, 0xffffffffffffffff, r1, 0x2}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) getpid() (async) getpgid(r1) (async) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0x7f}, 0x7, 0xfffffffffffff299, 0x81, 0x9, 0xffffffffffffffff, r1, 0x2}) (async) 00:17:43 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/144) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/144) (async) 00:17:43 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) 00:17:43 executing program 5: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:43 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) 00:17:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:43 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/144) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/144) (async) [ 1326.163522] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:43 executing program 5: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:43 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = getpid() getpgid(r1) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0x7f}, 0x7, 0xfffffffffffff299, 0x81, 0x9, 0xffffffffffffffff, r1, 0x2}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) getpid() (async) getpgid(r1) (async) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0x7f}, 0x7, 0xfffffffffffff299, 0x81, 0x9, 0xffffffffffffffff, r1, 0x2}) (async) 00:17:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:44 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) 00:17:44 executing program 0: shmget$private(0x0, 0x4000, 0x78000aa4, &(0x7f0000ffc000/0x4000)=nil) 00:17:44 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001202}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) 00:17:44 executing program 5: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:44 executing program 4: shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x100000000) 00:17:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:44 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:44 executing program 4: shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x100000000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) (async) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x100000000) (async) 00:17:44 executing program 5: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:44 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001202}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) 00:17:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:44 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r6 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) 00:17:44 executing program 4: shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x100000000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) (async) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x100000000) (async) 00:17:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:44 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:44 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001202}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) 00:17:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='k'], 0x24}}, 0x0) 00:17:45 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:17:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:45 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "e39d26cbc6627ace7b0a8b384d6f1c6aa05501dfe181760ef970126a9adfbbe3b48cc2edc4f56077d2ffdd5658b5f08e6dab3c8c6adc87e07d3887cd06e016ca", 0x1f}, 0x48, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 00:17:45 executing program 4: shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) r0 = shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) 00:17:45 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ff9000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)) 00:17:45 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) [ 1328.198421] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 00:17:45 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:45 executing program 4: shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) (async, rerun: 64) r0 = shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) (rerun: 64) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) 00:17:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:45 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ff9000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)) 00:17:45 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:46 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ff9000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x78001842, &(0x7f0000ff9000/0x3000)=nil) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)) (async) 00:17:46 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/15) 00:17:46 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:46 executing program 4: shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) r0 = shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) 00:17:46 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:46 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 00:17:46 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:17:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="af8803970000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 00:17:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:46 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) 00:17:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="af8803970000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 00:17:46 executing program 5: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmget(0x1, 0x4000, 0x100, &(0x7f0000ff8000/0x4000)=nil) 00:17:46 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:46 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) 00:17:47 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 64) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) (rerun: 64) 00:17:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:47 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) 00:17:47 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r4, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) 00:17:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:47 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:47 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) (async) 00:17:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:47 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) r2 = shmget$private(0x0, 0x4000, 0xfc000802, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/25) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/42) 00:17:47 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) r2 = shmget$private(0x0, 0x4000, 0xfc000802, &(0x7f0000ffb000/0x4000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) (async) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) (async) shmctl$IPC_RMID(r3, 0x0) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/25) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/42) 00:17:47 executing program 0: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r5, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 00:17:47 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 00:17:47 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/123) 00:17:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:47 executing program 5: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 00:17:48 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) bind$bt_sco(r4, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:17:48 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) r2 = shmget$private(0x0, 0x4000, 0xfc000802, &(0x7f0000ffb000/0x4000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) (async) shmctl$IPC_RMID(r3, 0x0) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/25) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/42) 00:17:48 executing program 0: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4316d) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/86) 00:17:48 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 00:17:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:48 executing program 0: r0 = gettid() ptrace$setregs(0xd, r0, 0xfc65, &(0x7f0000000000)="eb46e214e61a11a5f7b6b0e0b4d98569896a4669ceabcd277c4e4f22984f255503ba6764495efc70b64646d4415007d7c54ed5739d5ae9491e5cd699fefe63845c8cc1b9d4d660f7859b4cc2e5e276e6fc1994b9b67e44c0f8b1fa4909c3a21ae4fddeed0fa8081a8110674fcde1c96fecd6a06c5581c98b3af52ba89f18682fc2516b5615fbe0e79284b3614628") shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff8000/0x4000)=nil) 00:17:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:48 executing program 4: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 00:17:48 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/4096) r1 = geteuid() r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000001000)={{0x3, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xa2, 0x4e}, 0x80, 0x3, 0x6, 0x40, 0xffffffffffffffff, 0x0, 0x9}) 00:17:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:48 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) r2 = getegid() r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x282000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = getpgid(0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40000001}, 0x0) getpid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0x0, r2, 0x0, r2, 0x146, 0x1}, 0x9, 0x7, 0x20, 0x8, 0x0, r4, 0x7fff}) 00:17:49 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) connect$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:49 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/4096) r1 = geteuid() r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000001000)={{0x3, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xa2, 0x4e}, 0x80, 0x3, 0x6, 0x40, 0xffffffffffffffff, 0x0, 0x9}) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/4096) (async) geteuid() (async) geteuid() (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001000)={{0x3, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xa2, 0x4e}, 0x80, 0x3, 0x6, 0x40, 0xffffffffffffffff, 0x0, 0x9}) (async) 00:17:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:49 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) (async) r2 = getegid() (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x282000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = getpgid(0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40000001}, 0x0) getpid() (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0x0, r2, 0x0, r2, 0x146, 0x1}, 0x9, 0x7, 0x20, 0x8, 0x0, r4, 0x7fff}) 00:17:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) 00:17:49 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/4096) r1 = geteuid() (async) r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000001000)={{0x3, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xa2, 0x4e}, 0x80, 0x3, 0x6, 0x40, 0xffffffffffffffff, 0x0, 0x9}) 00:17:49 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) r2 = getegid() (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x282000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = getpgid(0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40000001}, 0x0) getpid() (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0x0, r2, 0x0, r2, 0x146, 0x1}, 0x9, 0x7, 0x20, 0x8, 0x0, r4, 0x7fff}) 00:17:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x52147e822827605}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x200008a0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9281d519b048d5245fe7472a933689d1e0411cf14a7d862f4a0a17459225af27b57ba7f0698c0e11e4f5ca5be7e6f3ecec744d68352ef953e07dc03206352c48ff9e1b010c298046036f37730334e2fc579ec20c2499c1c34381c3959a5be34c79f11d7e7e641f7255c1f8c1c3", @ANYRES16=r1, @ANYBLOB="79cd80e05b0e", @ANYRES32=r0, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) 00:17:50 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) connect$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:50 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x20140, 0x0) read$proc_mixer(r0, &(0x7f0000000040)=""/236, 0xec) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:50 executing program 4: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKRRPART(r0, 0x125f, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 00:17:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000180), 0x4) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe13b4d4fd5b69a07}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48080) 00:17:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:50 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:50 executing program 4: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 00:17:50 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:50 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x20140, 0x0) read$proc_mixer(r0, &(0x7f0000000040)=""/236, 0xec) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:50 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:51 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:17:51 executing program 5: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 00:17:51 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x20140, 0x0) read$proc_mixer(r0, &(0x7f0000000040)=""/236, 0xec) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x20140, 0x0) (async) read$proc_mixer(r0, &(0x7f0000000040)=""/236, 0xec) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:51 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:51 executing program 4: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKRRPART(r0, 0x125f, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) (async) 00:17:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:51 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ff6000/0xa000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:51 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400c80) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1426) 00:17:51 executing program 5: r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:51 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:52 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:52 executing program 5: r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400c80) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1426) 00:17:52 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmat(r0, &(0x7f0000ff6000/0xa000)=nil, 0x1000) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:17:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400c80) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1426) 00:17:52 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ff6000/0xa000)=nil, 0x1000) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:52 executing program 5: r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:52 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:52 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) 00:17:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:52 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/198) 00:17:52 executing program 2: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) 00:17:52 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:52 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 2: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:52 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/198) 00:17:52 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:52 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:52 executing program 2: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) (async) 00:17:52 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/198) 00:17:52 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:52 executing program 0: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:52 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) 00:17:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) 00:17:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:53 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:53 executing program 0: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:53 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) 00:17:53 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040029bd7000fcdbdf250400000000000200fc02000000000000000000000000000100000300fc02000000000000000000000000000000000000000000000000000000070073797374656d5f753a6f626a6563745f723a7572616e646f6d5f6465766963655f743a73300000000000040064010101000001000100000000000100"/142], 0x54}, 0x1, 0x0, 0x0, 0x2998c9d2db555b86}, 0x4000080) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) 00:17:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:53 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) (async) 00:17:53 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:53 executing program 0: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget$private(0x0, 0x14000, 0x20, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:53 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:53 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) (async) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000006c0)) (async) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) (async) 00:17:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:17:53 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/92) 00:17:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:54 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:54 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:54 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:54 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/92) 00:17:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:54 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0xa000) 00:17:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:54 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:54 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/92) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/92) (async) 00:17:54 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0xa000) 00:17:54 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:54 executing program 5: shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:55 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:17:55 executing program 5: shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:55 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0xa000) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0xa000) (async) 00:17:55 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:55 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) r2 = getpid() r3 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0xee00, 0xee00, 0x0, 0x48, 0xffff}, 0x50230dfe, 0x200, 0x6, 0x100000001, r2, r3, 0x9}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x101000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000100)) 00:17:55 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:55 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) r2 = getpid() r3 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0xee00, 0xee00, 0x0, 0x48, 0xffff}, 0x50230dfe, 0x200, 0x6, 0x100000001, r2, r3, 0x9}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x101000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000100)) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) (async) getpid() (async) gettid() (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0xee00, 0xee00, 0x0, 0x48, 0xffff}, 0x50230dfe, 0x200, 0x6, 0x100000001, r2, r3, 0x9}) (async) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x101000) (async) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000100)) (async) 00:17:55 executing program 4: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x1}}, 0x18) r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) r1 = shmget(0x1, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/4096) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/164) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffffffff}}, 0x10) r2 = shmget$private(0x0, 0x1000, 0xa, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ff7000/0x3000)=nil, 0x5000) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001340)=""/119) r3 = geteuid() r4 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f00000014c0)={{0x1, r3, 0xffffffffffffffff, 0x0, 0xee01, 0x100, 0x101}, 0x401, 0x2, 0x9, 0x7, r4, 0x0, 0x9}) r5 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000013c0)=""/231) 00:17:55 executing program 5: shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:17:55 executing program 3: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:55 executing program 4: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x1}}, 0x18) (async) r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) (async) r1 = shmget(0x1, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/4096) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/164) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffffffff}}, 0x10) (async) r2 = shmget$private(0x0, 0x1000, 0xa, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ff7000/0x3000)=nil, 0x5000) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001340)=""/119) (async) r3 = geteuid() (async) r4 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f00000014c0)={{0x1, r3, 0xffffffffffffffff, 0x0, 0xee01, 0x100, 0x101}, 0x401, 0x2, 0x9, 0x7, r4, 0x0, 0x9}) (async) r5 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000013c0)=""/231) 00:17:55 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:55 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) r2 = getpid() (rerun: 32) r3 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0xee00, 0xee00, 0x0, 0x48, 0xffff}, 0x50230dfe, 0x200, 0x6, 0x100000001, r2, r3, 0x9}) (async, rerun: 64) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x101000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000100)) 00:17:55 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) 00:17:56 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:56 executing program 4: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x1}}, 0x18) (async) r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) (async) r1 = shmget(0x1, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/4096) (async) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/164) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffffffff}}, 0x10) (async) r2 = shmget$private(0x0, 0x1000, 0xa, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) shmat(r2, &(0x7f0000ff7000/0x3000)=nil, 0x5000) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001340)=""/119) r3 = geteuid() r4 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f00000014c0)={{0x1, r3, 0xffffffffffffffff, 0x0, 0xee01, 0x100, 0x101}, 0x401, 0x2, 0x9, 0x7, r4, 0x0, 0x9}) (async) r5 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000013c0)=""/231) 00:17:56 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:56 executing program 2: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x18ac) 00:17:56 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:56 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:56 executing program 2: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x18ac) 00:17:56 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:56 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:56 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:17:56 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:56 executing program 2: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x18ac) 00:17:57 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:57 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:17:57 executing program 3: sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="8b58c338bb588c601fd28d7f5c82f566ae84e94d728bd2a533dd07b3fb7184d9369a20c71c7707b0a2c3d69852a8fe2cbe69b446f7fb45447d3420f6259232df52f9018dcdf1486af52dfa2f23a37ef4e87c1290d682d4b9b61ddb061633d20d8ff680", 0x63, 0x4000010, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x48) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000180)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/9) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@remote, @remote, @default, @bcast, @remote, @default, @rose, @default]}, &(0x7f0000000040)=0x48, 0x800) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000340)=0x401, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x1, r5, 0x30, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r6}}, 0x18) 00:17:57 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff8000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ff8000/0x3000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 00:17:57 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:57 executing program 0: sendto$netrom(0xffffffffffffffff, &(0x7f0000000080)="8b58c338bb588c601fd28d7f5c82f566ae84e94d728bd2a533dd07b3fb7184d9369a20c71c7707b0a2c3d69852a8fe2cbe69b446f7fb45447d3420f6259232df52f9018dcdf1486af52dfa2f23a37ef4e87c1290d682d4b9b61ddb061633d20d8ff680", 0x63, 0x4000010, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x48) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000180)=0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/9) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@remote, @remote, @default, @bcast, @remote, @default, @rose, @default]}, &(0x7f0000000040)=0x48, 0x800) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000340)=0x401, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x1, r5, 0x30, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r6}}, 0x18) 00:17:57 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/10) 00:17:57 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff8000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmat(r1, &(0x7f0000ff8000/0x3000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 00:17:57 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:57 executing program 0: shmget$private(0x7400000000000000, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) 00:17:57 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/116) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/18) 00:17:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x44}}, 0x8fc60c29c3cdf1f3) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) [ 1340.806705] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 00:17:58 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:58 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) shmctl$IPC_RMID(r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:17:58 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff8000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) (async) shmat(r1, &(0x7f0000ff8000/0x3000)=nil, 0x4000) (async) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 00:17:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB="086d7990"], 0x24}}, 0x0) 00:17:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c081}, 0x41) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240010e5}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\b'], 0x24}}, 0x0) 00:17:58 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) shmctl$IPC_RMID(0x0, 0x0) 00:17:58 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/142) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x75, 0x1}, 0xb) 00:17:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\bm'], 0x24}}, 0x0) 00:17:58 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) shmctl$IPC_RMID(r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) (async) shmctl$IPC_RMID(r0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) [ 1341.566785] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\bm'], 0x24}}, 0x0) [ 1341.629482] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:58 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/142) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x75, 0x1}, 0xb) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/142) (async) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x75, 0x1}, 0xb) (async) 00:17:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\bm'], 0x24}}, 0x0) [ 1341.747512] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1341.785318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1341.794738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:59 executing program 1: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250f0000000c00060003000000000000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600020000000200000005000f000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040801) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:17:59 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) shmctl$IPC_RMID(r0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:17:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32], 0x24}}, 0x0) 00:17:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES32, @ANYBLOB='\bm'], 0x24}}, 0x0) 00:17:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:17:59 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/142) (async) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x75, 0x1}, 0xb) 00:17:59 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, &(0x7f0000000040)=""/9) 00:17:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0x0) [ 1342.472286] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES64=r1, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) 00:17:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79cd88000300", @ANYRES64=r1, @ANYBLOB='\b'], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) 00:17:59 executing program 2: shmget$private(0x0, 0x11000, 0x4, &(0x7f0000fef000/0x11000)=nil) 00:17:59 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, &(0x7f0000000040)=""/9) 00:18:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:18:00 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 1) 00:18:00 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 1) 00:18:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (fail_nth: 1) 00:18:00 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, &(0x7f0000000040)=""/9) 00:18:00 executing program 2: shmget$private(0x0, 0x11000, 0x4, &(0x7f0000fef000/0x11000)=nil) [ 1343.432948] FAULT_INJECTION: forcing a failure. [ 1343.432948] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.458975] FAULT_INJECTION: forcing a failure. [ 1343.458975] name failslab, interval 1, probability 0, space 0, times 0 00:18:00 executing program 2: shmget$private(0x0, 0x11000, 0x4, &(0x7f0000fef000/0x11000)=nil) shmget$private(0x0, 0x11000, 0x4, &(0x7f0000fef000/0x11000)=nil) (async) 00:18:00 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, 0x0) [ 1343.484542] CPU: 1 PID: 7658 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1343.492360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1343.501722] Call Trace: [ 1343.504321] dump_stack+0x1fc/0x2ef [ 1343.507964] should_fail.cold+0xa/0xf [ 1343.511777] ? setup_fault_attr+0x200/0x200 [ 1343.516110] ? lock_acquire+0x170/0x3c0 [ 1343.520097] __should_failslab+0x115/0x180 [ 1343.524353] should_failslab+0x5/0x10 [ 1343.528160] kmem_cache_alloc_trace+0x284/0x380 [ 1343.532865] do_shmat+0x597/0xff0 [ 1343.536345] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1343.541111] ? vfs_write+0x393/0x540 [ 1343.544927] __x64_sys_shmat+0xcc/0x160 [ 1343.548908] ? do_shmat+0xff0/0xff0 [ 1343.552542] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1343.557563] ? do_syscall_64+0x21/0x620 [ 1343.561545] do_syscall_64+0xf9/0x620 [ 1343.565350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1343.570531] RIP: 0033:0x7fa18a26b409 00:18:00 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, 0x0) (fail_nth: 1) [ 1343.574241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1343.593234] RSP: 002b:00007fa188be0168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1343.600947] RAX: ffffffffffffffda RBX: 00007fa18a37df80 RCX: 00007fa18a26b409 [ 1343.608220] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 00000000007500e6 [ 1343.615492] RBP: 00007fa188be01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.622765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.630037] R13: 00007ffe792219ff R14: 00007fa188be0300 R15: 0000000000022000 [ 1343.645326] CPU: 0 PID: 7660 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1343.653151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1343.662523] Call Trace: [ 1343.665119] dump_stack+0x1fc/0x2ef [ 1343.668761] should_fail.cold+0xa/0xf [ 1343.672652] ? setup_fault_attr+0x200/0x200 [ 1343.676982] ? lock_acquire+0x170/0x3c0 [ 1343.680975] __should_failslab+0x115/0x180 [ 1343.685221] should_failslab+0x5/0x10 [ 1343.689030] kmem_cache_alloc_node+0x245/0x3b0 [ 1343.693619] __alloc_skb+0x71/0x560 [ 1343.697221] FAULT_INJECTION: forcing a failure. [ 1343.697221] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.697254] netlink_sendmsg+0x9f6/0xc50 [ 1343.712485] ? aa_af_perm+0x230/0x230 [ 1343.716284] ? nlmsg_notify+0x1f0/0x1f0 [ 1343.720256] ? kernel_recvmsg+0x220/0x220 [ 1343.724403] ? nlmsg_notify+0x1f0/0x1f0 [ 1343.728372] sock_sendmsg+0xc3/0x120 [ 1343.732074] ___sys_sendmsg+0x7bb/0x8e0 [ 1343.736044] ? check_preemption_disabled+0x41/0x280 [ 1343.741049] ? copy_msghdr_from_user+0x440/0x440 [ 1343.745795] ? __fget+0x32f/0x510 [ 1343.749242] ? lock_downgrade+0x720/0x720 [ 1343.753383] ? check_preemption_disabled+0x41/0x280 [ 1343.758394] ? check_preemption_disabled+0x41/0x280 [ 1343.763400] ? __fget+0x356/0x510 [ 1343.766843] ? do_dup2+0x450/0x450 [ 1343.770377] ? lock_downgrade+0x720/0x720 [ 1343.774520] ? vfs_write+0x3d7/0x540 [ 1343.778233] ? __fdget+0x1d0/0x230 [ 1343.781861] __x64_sys_sendmsg+0x132/0x220 [ 1343.786096] ? __sys_sendmsg+0x1b0/0x1b0 [ 1343.790146] ? vfs_write+0x393/0x540 [ 1343.793859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1343.799212] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1343.804216] ? do_syscall_64+0x21/0x620 [ 1343.808184] do_syscall_64+0xf9/0x620 [ 1343.811980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1343.817157] RIP: 0033:0x7f099cede409 [ 1343.820860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1343.839746] RSP: 002b:00007f099b853168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1343.847452] RAX: ffffffffffffffda RBX: 00007f099cff0f80 RCX: 00007f099cede409 [ 1343.854710] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1343.861964] RBP: 00007f099b8531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.869217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.876537] R13: 00007ffcf379321f R14: 00007f099b853300 R15: 0000000000022000 00:18:00 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 2) 00:18:00 executing program 2: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040)=0x7ffffffe, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0xffffff01, &(0x7f0000000080)=0x4) [ 1343.883901] CPU: 1 PID: 7670 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1343.891698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1343.901048] Call Trace: [ 1343.903644] dump_stack+0x1fc/0x2ef [ 1343.907284] should_fail.cold+0xa/0xf [ 1343.911092] ? setup_fault_attr+0x200/0x200 [ 1343.915424] ? lock_acquire+0x170/0x3c0 [ 1343.919410] __should_failslab+0x115/0x180 [ 1343.923661] should_failslab+0x5/0x10 [ 1343.927465] kmem_cache_alloc_trace+0x284/0x380 [ 1343.932142] do_shmat+0x597/0xff0 [ 1343.935681] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1343.940558] ? vfs_write+0x393/0x540 [ 1343.944289] __x64_sys_shmat+0xcc/0x160 [ 1343.948275] ? do_shmat+0xff0/0xff0 [ 1343.951910] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1343.956939] ? do_syscall_64+0x21/0x620 [ 1343.960924] do_syscall_64+0xf9/0x620 [ 1343.964734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1343.969927] RIP: 0033:0x7fa847cf0409 00:18:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (fail_nth: 2) [ 1343.973644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1343.992544] RSP: 002b:00007fa846665168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1344.000407] RAX: ffffffffffffffda RBX: 00007fa847e02f80 RCX: 00007fa847cf0409 [ 1344.007766] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 000000000146027b [ 1344.015039] RBP: 00007fa8466651d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.022317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.029678] R13: 00007fffd2bc9b3f R14: 00007fa846665300 R15: 0000000000022000 [ 1344.100590] FAULT_INJECTION: forcing a failure. [ 1344.100590] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.112478] CPU: 1 PID: 7685 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1344.120287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1344.129641] Call Trace: [ 1344.132241] dump_stack+0x1fc/0x2ef [ 1344.135880] should_fail.cold+0xa/0xf [ 1344.139692] ? setup_fault_attr+0x200/0x200 [ 1344.144016] ? lock_acquire+0x170/0x3c0 [ 1344.147999] __should_failslab+0x115/0x180 [ 1344.152241] should_failslab+0x5/0x10 [ 1344.156040] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1344.161154] __kmalloc_node_track_caller+0x38/0x70 [ 1344.166092] __alloc_skb+0xae/0x560 [ 1344.169731] netlink_sendmsg+0x9f6/0xc50 [ 1344.173799] ? aa_af_perm+0x230/0x230 [ 1344.177605] ? nlmsg_notify+0x1f0/0x1f0 [ 1344.181581] ? kernel_recvmsg+0x220/0x220 [ 1344.185740] ? nlmsg_notify+0x1f0/0x1f0 [ 1344.189719] sock_sendmsg+0xc3/0x120 [ 1344.193548] ___sys_sendmsg+0x7bb/0x8e0 [ 1344.197536] ? check_preemption_disabled+0x41/0x280 [ 1344.202556] ? copy_msghdr_from_user+0x440/0x440 [ 1344.207323] ? __fget+0x32f/0x510 [ 1344.210786] ? lock_downgrade+0x720/0x720 [ 1344.214938] ? check_preemption_disabled+0x41/0x280 [ 1344.219967] ? check_preemption_disabled+0x41/0x280 [ 1344.224992] ? __fget+0x356/0x510 [ 1344.228457] ? do_dup2+0x450/0x450 [ 1344.232019] ? lock_downgrade+0x720/0x720 [ 1344.236168] ? vfs_write+0x3d7/0x540 [ 1344.239885] ? __fdget+0x1d0/0x230 [ 1344.243429] __x64_sys_sendmsg+0x132/0x220 [ 1344.247670] ? __sys_sendmsg+0x1b0/0x1b0 [ 1344.251729] ? vfs_write+0x393/0x540 [ 1344.255455] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1344.260821] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1344.265844] ? do_syscall_64+0x21/0x620 [ 1344.269822] do_syscall_64+0xf9/0x620 [ 1344.273635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.278824] RIP: 0033:0x7f099cede409 [ 1344.282538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:18:01 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:18:01 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, 0x0) 00:18:01 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 2) 00:18:01 executing program 2: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040)=0x7ffffffe, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0xffffff01, &(0x7f0000000080)=0x4) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040)=0x7ffffffe, 0x4) (async) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0xffffff01, &(0x7f0000000080)=0x4) (async) 00:18:01 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:18:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (fail_nth: 3) [ 1344.301433] RSP: 002b:00007f099b853168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.309129] RAX: ffffffffffffffda RBX: 00007f099cff0f80 RCX: 00007f099cede409 [ 1344.316385] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1344.323731] RBP: 00007f099b8531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.330984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.338236] R13: 00007ffcf379321f R14: 00007f099b853300 R15: 0000000000022000 00:18:01 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4002) 00:18:01 executing program 4: shmctl$SHM_INFO(0x0, 0x2, 0x0) 00:18:01 executing program 2: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040)=0x7ffffffe, 0x4) (async) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0xffffff01, &(0x7f0000000080)=0x4) [ 1344.510395] FAULT_INJECTION: forcing a failure. [ 1344.510395] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.551787] FAULT_INJECTION: forcing a failure. [ 1344.551787] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.560233] CPU: 1 PID: 7710 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1344.571022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1344.580382] Call Trace: [ 1344.583068] dump_stack+0x1fc/0x2ef [ 1344.586703] should_fail.cold+0xa/0xf [ 1344.590607] ? setup_fault_attr+0x200/0x200 [ 1344.594939] ? lock_acquire+0x170/0x3c0 [ 1344.598931] __should_failslab+0x115/0x180 [ 1344.603177] should_failslab+0x5/0x10 [ 1344.606982] kmem_cache_alloc+0x277/0x370 [ 1344.611146] __alloc_file+0x21/0x340 [ 1344.614870] alloc_empty_file+0x6d/0x170 [ 1344.618937] alloc_file+0x5e/0x4d0 [ 1344.622484] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1344.627512] alloc_file_clone+0x22/0xc0 [ 1344.631577] do_shmat+0x603/0xff0 [ 1344.635043] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1344.639829] ? vfs_write+0x393/0x540 [ 1344.643562] __x64_sys_shmat+0xcc/0x160 [ 1344.647545] ? do_shmat+0xff0/0xff0 [ 1344.651177] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1344.656195] ? do_syscall_64+0x21/0x620 [ 1344.660181] do_syscall_64+0xf9/0x620 [ 1344.663981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.669169] RIP: 0033:0x7fa847cf0409 [ 1344.672888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1344.691792] RSP: 002b:00007fa846665168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e 00:18:01 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) [ 1344.699510] RAX: ffffffffffffffda RBX: 00007fa847e02f80 RCX: 00007fa847cf0409 [ 1344.706797] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 000000000146827c [ 1344.714071] RBP: 00007fa8466651d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.721343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.728616] R13: 00007fffd2bc9b3f R14: 00007fa846665300 R15: 0000000000022000 00:18:01 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:18:01 executing program 4: shmctl$SHM_INFO(0x0, 0x3, 0x0) [ 1344.755108] CPU: 1 PID: 7714 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1344.762935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1344.772290] Call Trace: [ 1344.774882] dump_stack+0x1fc/0x2ef [ 1344.778521] should_fail.cold+0xa/0xf [ 1344.782329] ? setup_fault_attr+0x200/0x200 [ 1344.786657] ? lock_acquire+0x170/0x3c0 [ 1344.790728] __should_failslab+0x115/0x180 [ 1344.794977] should_failslab+0x5/0x10 [ 1344.798786] kmem_cache_alloc_node+0x245/0x3b0 [ 1344.803374] __alloc_skb+0x71/0x560 [ 1344.807008] netlink_ack+0x27d/0xae0 [ 1344.810724] ? __radix_tree_lookup+0x216/0x370 [ 1344.815408] ? netlink_sendmsg+0xc50/0xc50 [ 1344.819654] netlink_rcv_skb+0x353/0x440 [ 1344.823731] ? genl_family_rcv_msg+0xc40/0xc40 [ 1344.828321] ? netlink_ack+0xae0/0xae0 [ 1344.832215] ? genl_rcv+0x15/0x40 [ 1344.835679] genl_rcv+0x24/0x40 [ 1344.838967] netlink_unicast+0x4d5/0x690 [ 1344.843035] ? netlink_sendskb+0x110/0x110 [ 1344.847272] ? _copy_from_iter_full+0x229/0x7c0 [ 1344.851970] ? __phys_addr_symbol+0x2c/0x70 [ 1344.856298] ? __check_object_size+0x17b/0x3e0 [ 1344.860885] netlink_sendmsg+0x6c3/0xc50 [ 1344.864960] ? aa_af_perm+0x230/0x230 [ 1344.868764] ? nlmsg_notify+0x1f0/0x1f0 [ 1344.872742] ? kernel_recvmsg+0x220/0x220 [ 1344.876900] ? nlmsg_notify+0x1f0/0x1f0 [ 1344.880894] sock_sendmsg+0xc3/0x120 [ 1344.884613] ___sys_sendmsg+0x7bb/0x8e0 [ 1344.888596] ? check_preemption_disabled+0x41/0x280 [ 1344.893614] ? copy_msghdr_from_user+0x440/0x440 [ 1344.898377] ? __fget+0x32f/0x510 [ 1344.901841] ? lock_downgrade+0x720/0x720 00:18:01 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) (async) shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) [ 1344.905997] ? check_preemption_disabled+0x41/0x280 [ 1344.911023] ? check_preemption_disabled+0x41/0x280 [ 1344.916095] ? __fget+0x356/0x510 [ 1344.919555] ? do_dup2+0x450/0x450 [ 1344.923097] ? lock_downgrade+0x720/0x720 [ 1344.927248] ? vfs_write+0x3d7/0x540 [ 1344.930969] ? __fdget+0x1d0/0x230 [ 1344.934518] __x64_sys_sendmsg+0x132/0x220 [ 1344.938757] ? __sys_sendmsg+0x1b0/0x1b0 [ 1344.942823] ? vfs_write+0x393/0x540 [ 1344.946554] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1344.951950] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1344.956974] ? do_syscall_64+0x21/0x620 [ 1344.961075] do_syscall_64+0xf9/0x620 [ 1344.964883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.970075] RIP: 0033:0x7f099cede409 [ 1344.973793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1344.992697] RSP: 002b:00007f099b853168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 00:18:02 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 3) 00:18:02 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:18:02 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4004) 00:18:02 executing program 4: shmctl$SHM_INFO(0x0, 0xb, 0x0) [ 1345.000425] RAX: ffffffffffffffda RBX: 00007f099cff0f80 RCX: 00007f099cede409 [ 1345.007700] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1345.014975] RBP: 00007f099b8531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.022243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.029515] R13: 00007ffcf379321f R14: 00007f099b853300 R15: 0000000000022000 [ 1345.118290] FAULT_INJECTION: forcing a failure. [ 1345.118290] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.131461] CPU: 1 PID: 7745 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1345.139273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1345.148631] Call Trace: [ 1345.151236] dump_stack+0x1fc/0x2ef [ 1345.154876] should_fail.cold+0xa/0xf [ 1345.158686] ? setup_fault_attr+0x200/0x200 [ 1345.163015] ? lock_acquire+0x170/0x3c0 [ 1345.166999] __should_failslab+0x115/0x180 [ 1345.171246] should_failslab+0x5/0x10 [ 1345.175087] kmem_cache_alloc_trace+0x284/0x380 [ 1345.179790] apparmor_file_alloc_security+0x394/0xad0 [ 1345.184990] ? apparmor_file_receive+0x160/0x160 [ 1345.189750] ? __alloc_file+0x21/0x340 [ 1345.193648] security_file_alloc+0x40/0x90 [ 1345.197892] __alloc_file+0xd8/0x340 [ 1345.201617] alloc_empty_file+0x6d/0x170 [ 1345.205683] alloc_file+0x5e/0x4d0 [ 1345.209400] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1345.214436] alloc_file_clone+0x22/0xc0 [ 1345.218426] do_shmat+0x603/0xff0 [ 1345.221895] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1345.226662] ? vfs_write+0x393/0x540 [ 1345.230387] __x64_sys_shmat+0xcc/0x160 [ 1345.234384] ? do_shmat+0xff0/0xff0 [ 1345.238019] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1345.243039] ? do_syscall_64+0x21/0x620 [ 1345.247020] do_syscall_64+0xf9/0x620 [ 1345.250830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.256018] RIP: 0033:0x7fa847cf0409 [ 1345.259734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1345.278989] RSP: 002b:00007fa846665168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1345.286701] RAX: ffffffffffffffda RBX: 00007fa847e02f80 RCX: 00007fa847cf0409 [ 1345.293977] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 000000000147027d [ 1345.301251] RBP: 00007fa8466651d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.308524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:18:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (fail_nth: 4) 00:18:02 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4014) 00:18:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:18:02 executing program 4: shmctl$SHM_INFO(0x0, 0xc, 0x0) 00:18:02 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) (async, rerun: 64) shmctl$IPC_RMID(r0, 0x0) 00:18:02 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 4) [ 1345.315791] R13: 00007fffd2bc9b3f R14: 00007fa846665300 R15: 0000000000022000 00:18:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:18:02 executing program 4: shmctl$SHM_INFO(0x0, 0xd, 0x0) [ 1345.383550] FAULT_INJECTION: forcing a failure. [ 1345.383550] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.406872] FAULT_INJECTION: forcing a failure. [ 1345.406872] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.418637] CPU: 1 PID: 7767 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 00:18:02 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/78) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = gettid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180)=0x4) r3 = getegid() shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000100)=""/123) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x3, 0xee00, r3, 0xffffffffffffffff, 0xee01, 0x25, 0x3f}, 0x3193, 0x4, 0x81, 0x1, 0xffffffffffffffff, r2, 0x3}) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) [ 1345.426444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1345.435801] Call Trace: [ 1345.438397] dump_stack+0x1fc/0x2ef [ 1345.442044] should_fail.cold+0xa/0xf [ 1345.445860] ? setup_fault_attr+0x200/0x200 [ 1345.450185] ? lock_acquire+0x170/0x3c0 [ 1345.454173] __should_failslab+0x115/0x180 [ 1345.458418] should_failslab+0x5/0x10 [ 1345.462223] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1345.467337] __kmalloc_node_track_caller+0x38/0x70 [ 1345.472286] __alloc_skb+0xae/0x560 [ 1345.475920] netlink_ack+0x27d/0xae0 [ 1345.479633] ? __radix_tree_lookup+0x216/0x370 [ 1345.484220] ? netlink_sendmsg+0xc50/0xc50 [ 1345.488474] netlink_rcv_skb+0x353/0x440 [ 1345.492538] ? genl_family_rcv_msg+0xc40/0xc40 [ 1345.497128] ? netlink_ack+0xae0/0xae0 [ 1345.501025] ? genl_rcv+0x15/0x40 [ 1345.504491] genl_rcv+0x24/0x40 [ 1345.507773] netlink_unicast+0x4d5/0x690 [ 1345.511833] ? netlink_sendskb+0x110/0x110 [ 1345.516091] ? _copy_from_iter_full+0x229/0x7c0 [ 1345.520768] ? __phys_addr_symbol+0x2c/0x70 [ 1345.525103] ? __check_object_size+0x17b/0x3e0 [ 1345.529689] netlink_sendmsg+0x6c3/0xc50 [ 1345.533756] ? aa_af_perm+0x230/0x230 [ 1345.537569] ? nlmsg_notify+0x1f0/0x1f0 [ 1345.541541] ? kernel_recvmsg+0x220/0x220 [ 1345.545700] ? nlmsg_notify+0x1f0/0x1f0 [ 1345.549684] sock_sendmsg+0xc3/0x120 [ 1345.553406] ___sys_sendmsg+0x7bb/0x8e0 [ 1345.557392] ? check_preemption_disabled+0x41/0x280 [ 1345.562414] ? copy_msghdr_from_user+0x440/0x440 [ 1345.567178] ? __fget+0x32f/0x510 [ 1345.570728] ? lock_downgrade+0x720/0x720 [ 1345.574879] ? check_preemption_disabled+0x41/0x280 00:18:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 1345.579906] ? check_preemption_disabled+0x41/0x280 [ 1345.584937] ? __fget+0x356/0x510 [ 1345.588405] ? do_dup2+0x450/0x450 [ 1345.591953] ? lock_downgrade+0x720/0x720 [ 1345.596107] ? vfs_write+0x3d7/0x540 [ 1345.599826] ? __fdget+0x1d0/0x230 [ 1345.603375] __x64_sys_sendmsg+0x132/0x220 [ 1345.607617] ? __sys_sendmsg+0x1b0/0x1b0 [ 1345.611685] ? vfs_write+0x393/0x540 [ 1345.615419] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1345.620802] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1345.625824] ? do_syscall_64+0x21/0x620 [ 1345.629807] do_syscall_64+0xf9/0x620 00:18:02 executing program 4: shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 1345.633621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.638819] RIP: 0033:0x7f099cede409 [ 1345.642535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1345.661466] RSP: 002b:00007f099b853168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.669176] RAX: ffffffffffffffda RBX: 00007f099cff0f80 RCX: 00007f099cede409 [ 1345.676452] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 00:18:02 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) [ 1345.683748] RBP: 00007f099b8531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.691091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.698361] R13: 00007ffcf379321f R14: 00007f099b853300 R15: 0000000000022000 [ 1345.706333] CPU: 0 PID: 7771 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1345.714144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1345.723514] Call Trace: [ 1345.726108] dump_stack+0x1fc/0x2ef [ 1345.729754] should_fail.cold+0xa/0xf [ 1345.733582] ? setup_fault_attr+0x200/0x200 [ 1345.737919] ? lock_acquire+0x170/0x3c0 [ 1345.741904] __should_failslab+0x115/0x180 [ 1345.746155] should_failslab+0x5/0x10 [ 1345.749962] kmem_cache_alloc+0x277/0x370 [ 1345.754157] vm_area_dup+0x1c/0x170 [ 1345.757790] __split_vma+0xa5/0x560 [ 1345.761426] do_munmap+0x2f0/0xde0 [ 1345.764980] ? arch_get_unmapped_area+0x750/0x750 [ 1345.769832] ? mark_held_locks+0xf0/0xf0 [ 1345.773900] mmap_region+0x2a3/0x16b0 [ 1345.777711] ? vm_munmap+0x140/0x140 [ 1345.781438] ? security_mmap_addr+0x73/0x90 [ 1345.785778] ? get_unmapped_area+0x294/0x3c0 [ 1345.790372] do_mmap+0x8e8/0x1080 [ 1345.793840] do_shmat+0xd85/0xff0 [ 1345.797310] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1345.802084] ? vfs_write+0x393/0x540 [ 1345.805816] __x64_sys_shmat+0xcc/0x160 [ 1345.809801] ? do_shmat+0xff0/0xff0 [ 1345.813434] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1345.818458] ? do_syscall_64+0x21/0x620 [ 1345.822441] do_syscall_64+0xf9/0x620 [ 1345.826265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.831550] RIP: 0033:0x7fa847cf0409 [ 1345.835265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1345.854166] RSP: 002b:00007fa846665168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1345.861883] RAX: ffffffffffffffda RBX: 00007fa847e02f80 RCX: 00007fa847cf0409 [ 1345.869160] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 000000000147827e [ 1345.876431] RBP: 00007fa8466651d0 R08: 0000000000000000 R09: 0000000000000000 00:18:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (fail_nth: 5) 00:18:02 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/78) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = gettid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180)=0x4) (async) r3 = getegid() (async) shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000100)=""/123) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x3, 0xee00, r3, 0xffffffffffffffff, 0xee01, 0x25, 0x3f}, 0x3193, 0x4, 0x81, 0x1, 0xffffffffffffffff, r2, 0x3}) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$IPC_RMID(r1, 0x0) 00:18:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:02 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async, rerun: 64) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/78) (async, rerun: 64) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = gettid() (async, rerun: 32) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180)=0x4) (async, rerun: 32) r3 = getegid() shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000100)=""/123) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x3, 0xee00, r3, 0xffffffffffffffff, 0xee01, 0x25, 0x3f}, 0x3193, 0x4, 0x81, 0x1, 0xffffffffffffffff, r2, 0x3}) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$IPC_RMID(r1, 0x0) 00:18:02 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/78) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = gettid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180)=0x4) r3 = getegid() shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000100)=""/123) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x3, 0xee00, r3, 0xffffffffffffffff, 0xee01, 0x25, 0x3f}, 0x3193, 0x4, 0x81, 0x1, 0xffffffffffffffff, r2, 0x3}) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) [ 1345.883700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.890976] R13: 00007fffd2bc9b3f R14: 00007fa846665300 R15: 0000000000022000 00:18:03 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 5) 00:18:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:03 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x78000000, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x1, @ib={0x1b, 0xffff, 0x3c, {"b1ba7800000000006fb86496000100"}, 0x7fffffffffffffff, 0xac00000000000000, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x5, {0x31, 0x8, "4bb3f12340f142750dad050518575d812d57938911dd32c83a3acd9ccdb5a10e709ccd2c46339589eb4956a01f19e3619aa2e453668b727d42695fa0f7d50c296d18e551e4658c9041df76c1b8b71bc3210361a5a619d41d824612a7c8a433d7e9ef85aaa663fed304620ab0826fa8ab7a8d2659228ad0c1f434059d74bfbd5b982b37124fc0dc22d27510d0f5c7c43af411eb025f3d40bfad35b0042c5d44f95be5c6613c58708cd079b286bada8ddcf931ffd2e3a7c532ef1b15f37115cc127979828ddf131e3dda5aa63f253d408b02df5b88e3c9c6537359541d8b0ff4b4c65c584ddb6d8c2394924c2786f07d075620e8454a280026abe11644360c723c", 0x1d, 0x47, 0x1, 0x6, 0x81, 0x0, 0x1}, r2}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x1, {0xa, 0x4e20, 0x1ff, @private2, 0xe4c5}, r2}}, 0x38) 00:18:03 executing program 4: shmctl$SHM_INFO(0x0, 0xf, 0x0) 00:18:03 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/78) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r2 = gettid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180)=0x4) r3 = getegid() shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000100)=""/123) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x3, 0xee00, r3, 0xffffffffffffffff, 0xee01, 0x25, 0x3f}, 0x3193, 0x4, 0x81, 0x1, 0xffffffffffffffff, r2, 0x3}) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) 00:18:03 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:18:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:03 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x78000000, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x1, @ib={0x1b, 0xffff, 0x3c, {"b1ba7800000000006fb86496000100"}, 0x7fffffffffffffff, 0xac00000000000000, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x5, {0x31, 0x8, "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", 0x1d, 0x47, 0x1, 0x6, 0x81, 0x0, 0x1}, r2}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x1, {0xa, 0x4e20, 0x1ff, @private2, 0xe4c5}, r2}}, 0x38) shmget$private(0x0, 0x14000, 0x78000000, &(0x7f0000feb000/0x14000)=nil) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x1, @ib={0x1b, 0xffff, 0x3c, {"b1ba7800000000006fb86496000100"}, 0x7fffffffffffffff, 0xac00000000000000, 0x5}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x5, {0x31, 0x8, "4bb3f12340f142750dad050518575d812d57938911dd32c83a3acd9ccdb5a10e709ccd2c46339589eb4956a01f19e3619aa2e453668b727d42695fa0f7d50c296d18e551e4658c9041df76c1b8b71bc3210361a5a619d41d824612a7c8a433d7e9ef85aaa663fed304620ab0826fa8ab7a8d2659228ad0c1f434059d74bfbd5b982b37124fc0dc22d27510d0f5c7c43af411eb025f3d40bfad35b0042c5d44f95be5c6613c58708cd079b286bada8ddcf931ffd2e3a7c532ef1b15f37115cc127979828ddf131e3dda5aa63f253d408b02df5b88e3c9c6537359541d8b0ff4b4c65c584ddb6d8c2394924c2786f07d075620e8454a280026abe11644360c723c", 0x1d, 0x47, 0x1, 0x6, 0x81, 0x0, 0x1}, r2}}, 0x128) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x1, {0xa, 0x4e20, 0x1ff, @private2, 0xe4c5}, r2}}, 0x38) (async) 00:18:03 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r3, 0x13c, 0x0) 00:18:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (fail_nth: 1) [ 1346.005435] FAULT_INJECTION: forcing a failure. [ 1346.005435] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.060059] CPU: 1 PID: 7826 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1346.067890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1346.077247] Call Trace: [ 1346.079845] dump_stack+0x1fc/0x2ef [ 1346.083487] should_fail.cold+0xa/0xf [ 1346.087398] ? setup_fault_attr+0x200/0x200 [ 1346.091725] ? aa_file_perm+0x3f0/0xd20 [ 1346.095709] ? should_fail+0x142/0x7b0 [ 1346.099607] ? fs_reclaim_release+0xd0/0x110 [ 1346.104027] __should_failslab+0x115/0x180 00:18:03 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r3, 0x13c, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_LOCK(r2, 0xb) (async) shmget(0x2, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) (async) shmctl$SHM_INFO(r3, 0x13c, 0x0) (async) [ 1346.108273] should_failslab+0x5/0x10 [ 1346.112171] kmem_cache_alloc+0x3f/0x370 [ 1346.116243] anon_vma_clone+0xe0/0x5e0 [ 1346.120238] __split_vma+0x179/0x560 [ 1346.123965] do_munmap+0x2f0/0xde0 [ 1346.127516] ? arch_get_unmapped_area+0x750/0x750 [ 1346.132368] ? mark_held_locks+0xf0/0xf0 [ 1346.136438] mmap_region+0x2a3/0x16b0 [ 1346.140250] ? vm_munmap+0x140/0x140 [ 1346.143974] ? security_mmap_addr+0x73/0x90 [ 1346.148319] ? get_unmapped_area+0x294/0x3c0 [ 1346.152736] do_mmap+0x8e8/0x1080 [ 1346.156207] do_shmat+0xd85/0xff0 [ 1346.159884] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1346.164650] ? vfs_write+0x393/0x540 [ 1346.168378] __x64_sys_shmat+0xcc/0x160 [ 1346.172359] ? do_shmat+0xff0/0xff0 [ 1346.175998] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1346.181021] ? do_syscall_64+0x21/0x620 [ 1346.185092] do_syscall_64+0xf9/0x620 [ 1346.188901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1346.194088] RIP: 0033:0x7fa847cf0409 00:18:03 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) (async) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r3, 0x13c, 0x0) [ 1346.197803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1346.216805] RSP: 002b:00007fa846665168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1346.224630] RAX: ffffffffffffffda RBX: 00007fa847e02f80 RCX: 00007fa847cf0409 [ 1346.231991] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 000000000148027f [ 1346.239265] RBP: 00007fa8466651d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.246539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.253809] R13: 00007fffd2bc9b3f R14: 00007fa846665300 R15: 0000000000022000 00:18:03 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 6) 00:18:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:03 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:18:03 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x78000000, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x1c, 0x1, @ib={0x1b, 0xffff, 0x3c, {"b1ba7800000000006fb86496000100"}, 0x7fffffffffffffff, 0xac00000000000000, 0x5}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x5, {0x31, 0x8, "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", 0x1d, 0x47, 0x1, 0x6, 0x81, 0x0, 0x1}, r2}}, 0x128) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x1, {0xa, 0x4e20, 0x1ff, @private2, 0xe4c5}, r2}}, 0x38) 00:18:03 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/35) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = geteuid() r2 = getpid() r3 = getpid() getpgid(r3) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001040)={{0x2, 0xee00, 0xee00, r1, 0xee01, 0x80, 0x2}, 0xfffffffa, 0xf18, 0x4, 0x0, r2, r3, 0x9}) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/4096) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 00:18:03 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:18:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0xf, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:03 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) 00:18:03 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/35) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = geteuid() (async, rerun: 32) r2 = getpid() (async, rerun: 32) r3 = getpid() getpgid(r3) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001040)={{0x2, 0xee00, 0xee00, r1, 0xee01, 0x80, 0x2}, 0xfffffffa, 0xf18, 0x4, 0x0, r2, r3, 0x9}) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/4096) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) (async) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000) [ 1346.418928] FAULT_INJECTION: forcing a failure. [ 1346.418928] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.452287] CPU: 0 PID: 7891 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1346.460206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1346.469569] Call Trace: [ 1346.472181] dump_stack+0x1fc/0x2ef [ 1346.475822] should_fail.cold+0xa/0xf [ 1346.479636] ? setup_fault_attr+0x200/0x200 [ 1346.483981] ? lock_acquire+0x170/0x3c0 [ 1346.487971] __should_failslab+0x115/0x180 [ 1346.492313] should_failslab+0x5/0x10 [ 1346.496131] kmem_cache_alloc+0x277/0x370 [ 1346.500297] vm_area_alloc+0x1c/0x110 [ 1346.504105] mmap_region+0xa2a/0x16b0 [ 1346.507939] ? vm_munmap+0x140/0x140 [ 1346.511660] ? security_mmap_addr+0x73/0x90 [ 1346.515992] ? get_unmapped_area+0x294/0x3c0 [ 1346.520411] do_mmap+0x8e8/0x1080 [ 1346.523880] do_shmat+0xd85/0xff0 [ 1346.527356] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1346.532125] ? vfs_write+0x393/0x540 [ 1346.535853] __x64_sys_shmat+0xcc/0x160 [ 1346.539847] ? do_shmat+0xff0/0xff0 [ 1346.543479] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1346.548506] ? do_syscall_64+0x21/0x620 [ 1346.552488] do_syscall_64+0xf9/0x620 [ 1346.556299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1346.561489] RIP: 0033:0x7fa847cf0409 [ 1346.565210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1346.584203] RSP: 002b:00007fa846665168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1346.592094] RAX: ffffffffffffffda RBX: 00007fa847e02f80 RCX: 00007fa847cf0409 [ 1346.599369] RDX: 0000000000004000 RSI: 0000000020ffd000 RDI: 0000000001488280 [ 1346.606647] RBP: 00007fa8466651d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.613924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.621200] R13: 00007fffd2bc9b3f R14: 00007fa846665300 R15: 0000000000022000 [ 1347.012371] FAULT_INJECTION: forcing a failure. [ 1347.012371] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.023711] CPU: 0 PID: 7856 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1347.031498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1347.040834] Call Trace: [ 1347.043416] dump_stack+0x1fc/0x2ef [ 1347.047057] should_fail.cold+0xa/0xf [ 1347.050843] ? setup_fault_attr+0x200/0x200 [ 1347.055152] ? lock_acquire+0x170/0x3c0 [ 1347.059169] __should_failslab+0x115/0x180 [ 1347.063399] should_failslab+0x5/0x10 [ 1347.067207] kmem_cache_alloc+0x277/0x370 [ 1347.071340] taskstats_exit+0x66d/0xc10 [ 1347.075300] ? taskstats_user_cmd+0xfc0/0xfc0 [ 1347.079786] ? do_raw_spin_lock+0xcb/0x220 [ 1347.084019] do_exit+0x677/0x2be0 [ 1347.087476] ? task_work_run+0x11c/0x1c0 [ 1347.091527] ? mm_update_next_owner+0x650/0x650 [ 1347.096184] ? get_signal+0x388/0x1f70 [ 1347.100054] ? lock_downgrade+0x720/0x720 [ 1347.104363] ? lock_acquire+0x170/0x3c0 [ 1347.108334] do_group_exit+0x125/0x310 [ 1347.112207] get_signal+0x3f2/0x1f70 [ 1347.115922] ? sco_sock_connect+0x50c/0xa20 [ 1347.120228] do_signal+0x8f/0x1670 [ 1347.123758] ? kick_process+0xe4/0x170 [ 1347.127641] ? setup_sigcontext+0x820/0x820 [ 1347.131945] ? sco_connect_cfm+0x870/0x870 [ 1347.136160] ? fput+0xf2/0x190 [ 1347.139333] ? __ia32_sys_accept+0xb0/0xb0 [ 1347.143559] ? wait_for_completion_io+0x10/0x10 [ 1347.148223] ? vfs_write+0x393/0x540 [ 1347.151919] ? fput+0x2b/0x190 [ 1347.155095] ? ksys_write+0x1c8/0x2a0 [ 1347.158878] ? exit_to_usermode_loop+0x36/0x2a0 [ 1347.163540] exit_to_usermode_loop+0x204/0x2a0 [ 1347.168113] do_syscall_64+0x538/0x620 [ 1347.171992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.177161] RIP: 0033:0x7f0bf81c0409 [ 1347.180855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1347.199741] RSP: 002b:00007f0bf6b35168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 00:18:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) 00:18:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:04 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 00:18:04 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) 00:18:04 executing program 4: shmctl$SHM_INFO(0x0, 0x13c, 0x0) (async) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/35) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = geteuid() r2 = getpid() r3 = getpid() getpgid(r3) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001040)={{0x2, 0xee00, 0xee00, r1, 0xee01, 0x80, 0x2}, 0xfffffffa, 0xf18, 0x4, 0x0, r2, r3, 0x9}) (async) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/4096) (async) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) (async) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 00:18:04 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (fail_nth: 7) [ 1347.207434] RAX: fffffffffffffffc RBX: 00007f0bf82d2f80 RCX: 00007f0bf81c0409 [ 1347.214687] RDX: 0000000000000008 RSI: 0000000020000140 RDI: 0000000000000004 [ 1347.221943] RBP: 00007f0bf6b351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.229218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.236468] R13: 00007fff71e9302f R14: 00007f0bf6b35300 R15: 0000000000022000 00:18:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:18:04 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) 00:18:04 executing program 4: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x4da9, 0x3f, 0x450b, 0x3, 0x1f, 0xffffffffffffffff}) shmctl$SHM_INFO(0x0, 0x13c, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/245) 00:18:04 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/9) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000feb000/0x14000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 00:18:04 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) 00:18:04 executing program 2: shmget$private(0x0, 0x4000, 0x78001842, &(0x7f0000ff8000/0x4000)=nil) shmget(0x2, 0x1000, 0x200, &(0x7f0000ff9000/0x1000)=nil) [ 1347.402419] ================================================================== [ 1347.409815] BUG: KASAN: use-after-free in __lock_acquire+0x2cb4/0x3ff0 [ 1347.416482] Read of size 8 at addr ffff8880afda3620 by task kworker/0:2/6207 [ 1347.423659] [ 1347.425297] CPU: 0 PID: 6207 Comm: kworker/0:2 Not tainted 4.19.211-syzkaller #0 [ 1347.432825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1347.442184] Workqueue: events sco_sock_timeout [ 1347.446757] Call Trace: [ 1347.449344] dump_stack+0x1fc/0x2ef [ 1347.452973] print_address_description.cold+0x54/0x219 [ 1347.458272] kasan_report_error.cold+0x8a/0x1b9 [ 1347.462956] ? __lock_acquire+0x2cb4/0x3ff0 [ 1347.467285] __asan_report_load8_noabort+0x88/0x90 [ 1347.472213] ? __lock_acquire+0x2cb4/0x3ff0 [ 1347.476532] __lock_acquire+0x2cb4/0x3ff0 [ 1347.480689] ? mark_held_locks+0xf0/0xf0 [ 1347.484755] ? mark_held_locks+0xf0/0xf0 [ 1347.488819] ? lock_acquire+0x170/0x3c0 [ 1347.492795] ? trace_hardirqs_off+0x64/0x200 [ 1347.497203] ? sco_sock_timeout+0x5d/0x1b0 [ 1347.501440] lock_acquire+0x170/0x3c0 [ 1347.505242] ? sco_sock_timeout+0x7b/0x1b0 [ 1347.509476] _raw_spin_lock+0x2a/0x40 [ 1347.513279] ? sco_sock_timeout+0x7b/0x1b0 [ 1347.517509] sco_sock_timeout+0x7b/0x1b0 [ 1347.521568] process_one_work+0x864/0x1570 [ 1347.525805] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1347.530489] worker_thread+0x64c/0x1130 [ 1347.534451] ? __kthread_parkme+0x133/0x1e0 [ 1347.538763] ? process_one_work+0x1570/0x1570 [ 1347.543243] kthread+0x33f/0x460 [ 1347.546595] ? kthread_park+0x180/0x180 [ 1347.550556] ret_from_fork+0x24/0x30 [ 1347.554252] [ 1347.555864] Allocated by task 8107: [ 1347.559493] __kmalloc_node_track_caller+0x4c/0x70 [ 1347.564407] __alloc_skb+0xae/0x560 [ 1347.568017] sk_stream_alloc_skb+0xba/0x850 [ 1347.572319] tcp_sendmsg_locked+0xc0b/0x2f60 [ 1347.576712] tcp_sendmsg+0x2b/0x40 [ 1347.580237] inet_sendmsg+0x132/0x5a0 [ 1347.584036] sock_sendmsg+0xc3/0x120 [ 1347.587736] sock_write_iter+0x287/0x3c0 [ 1347.591781] __vfs_write+0x51b/0x770 [ 1347.595475] vfs_write+0x1f3/0x540 [ 1347.598997] ksys_write+0x12b/0x2a0 [ 1347.602611] do_syscall_64+0xf9/0x620 [ 1347.606395] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.611577] [ 1347.613188] Freed by task 8107: [ 1347.616451] kfree+0xcc/0x210 [ 1347.619626] skb_release_data+0x6de/0x920 [ 1347.623859] consume_skb+0x113/0x3d0 [ 1347.627557] __dev_kfree_skb_any+0x9c/0xc0 [ 1347.631865] napi_consume_skb+0x45d/0x5e0 [ 1347.636018] free_old_xmit_skbs+0xea/0x270 [ 1347.640237] start_xmit+0x156/0x17a0 [ 1347.643938] dev_hard_start_xmit+0x1a8/0x920 [ 1347.648333] sch_direct_xmit+0x2d6/0xf70 [ 1347.652388] __qdisc_run+0x4d0/0x1640 [ 1347.656260] __dev_queue_xmit+0x2102/0x2e00 [ 1347.660579] ip_finish_output2+0xb6d/0x15a0 [ 1347.664881] ip_finish_output+0xae9/0x10b0 [ 1347.669100] ip_output+0x203/0x5f0 [ 1347.672623] ip_local_out+0xaf/0x170 [ 1347.676322] __ip_queue_xmit+0x91e/0x1c10 [ 1347.680463] __tcp_transmit_skb+0x1b9c/0x3400 [ 1347.684938] tcp_write_xmit+0x989/0x5100 [ 1347.688980] __tcp_push_pending_frames+0xae/0x310 [ 1347.693821] tcp_push+0x4b7/0x6b0 [ 1347.697260] tcp_sendmsg_locked+0x26b3/0x2f60 [ 1347.701756] tcp_sendmsg+0x2b/0x40 [ 1347.705279] inet_sendmsg+0x132/0x5a0 [ 1347.709071] sock_sendmsg+0xc3/0x120 [ 1347.712771] sock_write_iter+0x287/0x3c0 [ 1347.716816] __vfs_write+0x51b/0x770 [ 1347.720515] vfs_write+0x1f3/0x540 [ 1347.724042] ksys_write+0x12b/0x2a0 [ 1347.727652] do_syscall_64+0xf9/0x620 [ 1347.731438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.736603] [ 1347.738214] The buggy address belongs to the object at ffff8880afda3580 [ 1347.738214] which belongs to the cache kmalloc-2048 of size 2048 [ 1347.751026] The buggy address is located 160 bytes inside of [ 1347.751026] 2048-byte region [ffff8880afda3580, ffff8880afda3d80) [ 1347.762966] The buggy address belongs to the page: [ 1347.767880] page:ffffea0002bf6880 count:1 mapcount:0 mapping:ffff88813bff0c40 index:0xffff8880afda2480 compound_mapcount: 0 [ 1347.779129] flags: 0xfff00000008100(slab|head) [ 1347.783713] raw: 00fff00000008100 ffffea0002887708 ffffea0002459708 ffff88813bff0c40 [ 1347.791593] raw: ffff8880afda2480 ffff8880afda2480 0000000100000001 0000000000000000 [ 1347.799450] page dumped because: kasan: bad access detected [ 1347.805134] [ 1347.806743] Memory state around the buggy address: [ 1347.811663] ffff8880afda3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1347.819003] ffff8880afda3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.826341] >ffff8880afda3600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.833676] ^ [ 1347.838069] ffff8880afda3680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.845407] ffff8880afda3700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.852745] ================================================================== [ 1347.860084] Disabling lock debugging due to kernel taint [ 1347.865530] Kernel panic - not syncing: panic_on_warn set ... [ 1347.865530] [ 1347.872879] CPU: 0 PID: 6207 Comm: kworker/0:2 Tainted: G B 4.19.211-syzkaller #0 [ 1347.881778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1347.891121] Workqueue: events sco_sock_timeout [ 1347.895710] Call Trace: [ 1347.898285] dump_stack+0x1fc/0x2ef [ 1347.901900] panic+0x26a/0x50e [ 1347.905076] ? __warn_printk+0xf3/0xf3 [ 1347.908958] ? lock_downgrade+0x720/0x720 [ 1347.913091] ? print_shadow_for_address+0xb8/0x114 [ 1347.918005] ? trace_hardirqs_off+0x64/0x200 [ 1347.922402] kasan_end_report+0x43/0x49 [ 1347.926362] kasan_report_error.cold+0xa7/0x1b9 [ 1347.931016] ? __lock_acquire+0x2cb4/0x3ff0 [ 1347.935345] __asan_report_load8_noabort+0x88/0x90 [ 1347.940260] ? __lock_acquire+0x2cb4/0x3ff0 [ 1347.944568] __lock_acquire+0x2cb4/0x3ff0 [ 1347.948703] ? mark_held_locks+0xf0/0xf0 [ 1347.952760] ? mark_held_locks+0xf0/0xf0 [ 1347.956813] ? lock_acquire+0x170/0x3c0 [ 1347.960774] ? trace_hardirqs_off+0x64/0x200 [ 1347.965168] ? sco_sock_timeout+0x5d/0x1b0 [ 1347.969387] lock_acquire+0x170/0x3c0 [ 1347.973171] ? sco_sock_timeout+0x7b/0x1b0 [ 1347.977393] _raw_spin_lock+0x2a/0x40 [ 1347.981192] ? sco_sock_timeout+0x7b/0x1b0 [ 1347.985412] sco_sock_timeout+0x7b/0x1b0 [ 1347.989460] process_one_work+0x864/0x1570 [ 1347.993683] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1347.998340] worker_thread+0x64c/0x1130 [ 1348.002304] ? __kthread_parkme+0x133/0x1e0 [ 1348.006697] ? process_one_work+0x1570/0x1570 [ 1348.011173] kthread+0x33f/0x460 [ 1348.014525] ? kthread_park+0x180/0x180 [ 1348.018482] ret_from_fork+0x24/0x30 [ 1348.022352] Kernel Offset: disabled [ 1348.026029] Rebooting in 86400 seconds..