ndmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e8af2f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d56}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db77ec4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68405821}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b36933}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e7b5a7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d23dfe}]}, {0x4}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbfd9dce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17b1f104}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44994a23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2578}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cc6675}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ab1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x408664b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f5aa46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66c9c262}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x222c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9fbc9c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a55882a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3d7a13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46feb0b3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x900fc91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c69ed41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34bc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:46:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000f8ffffff24008711f85d3062b5000005002ee81d00000005002b000300000005002a007770000000007f000000000000"], 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:46:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400740000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x20, 0x2, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:46:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x10000000, 0xfdfdffff, 0x4}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r12, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="28100010", @ANYRES16=r13, @ANYBLOB="04000000000000000000210000000500200069b6a4b8399bec07000000000a00010077"], 0x28}}, 0x0) 00:46:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e8af2f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d56}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db77ec4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68405821}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b36933}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e7b5a7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d23dfe}]}, {0x4}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbfd9dce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17b1f104}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44994a23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2578}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cc6675}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ab1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x408664b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f5aa46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66c9c262}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x222c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9fbc9c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a55882a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3d7a13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46feb0b3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x900fc91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c69ed41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34bc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e8af2f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d56}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db77ec4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68405821}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b36933}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e7b5a7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d23dfe}]}, {0x4}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbfd9dce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17b1f104}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44994a23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2578}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cc6675}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ab1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x408664b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f5aa46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66c9c262}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x222c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9fbc9c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a55882a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3d7a13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46feb0b3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x900fc91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c69ed41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34bc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:46:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000000000000000000104410790944e121444b22e86fe9"], 0x28}}, 0x0) 00:46:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304007a0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000006e9c91dde619fa0ecea65507b25c89866dbcdea2e4a411b61ee4b77994e7642e30f024db5d90ef42cc3ae5d745df365516650dc4b77617bb63042b26c15671280afe961402e63c", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) [ 1352.953594][T25992] validate_nla: 2 callbacks suppressed [ 1352.953613][T25992] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:46:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xa) (async) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x0, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) r10 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x3644, 0x4}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r13}}) (async) syz_io_uring_submit(r5, r9, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0xe, 0x0, @fd_index=0x8, 0x7, 0x0, 0x5, 0x0, 0x1, {0x0, r13}}) (async) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400810000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000000000000000000104410790944e121444b22e86fe9"], 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000000000000000000104410790944e121444b22e86fe9"], 0x28}}, 0x0) (async) 00:46:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000006e9c91dde619fa0ecea65507b25c89866dbcdea2e4a411b61ee4b77994e7642e30f024db5d90ef42cc3ae5d745df365516650dc4b77617bb63042b26c15671280afe961402e63c", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000006e9c91dde619fa0ecea65507b25c89866dbcdea2e4a411b61ee4b77994e7642e30f024db5d90ef42cc3ae5d745df365516650dc4b77617bb63042b26c15671280afe961402e63c", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:46:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x20, 0x2, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x20, 0x2, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) (async) 00:46:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async, rerun: 32) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = getpid() sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x10000000, 0xfdfdffff, 0x4}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r12, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="28100010", @ANYRES16=r13, @ANYBLOB="04000000000000000000210000000500200069b6a4b8399bec07000000000a00010077"], 0x28}}, 0x0) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130447880000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000000000000000000104410790944e121444b22e86fe9"], 0x28}}, 0x0) 00:46:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x20, 0x2, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:46:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000006e9c91dde619fa0ecea65507b25c89866dbcdea2e4a411b61ee4b77994e7642e30f024db5d90ef42cc3ae5d745df365516650dc4b77617bb63042b26c15671280afe961402e63c", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:46:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async, rerun: 32) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x10000000, 0xfdfdffff, 0x4}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async, rerun: 64) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r12, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="28100010", @ANYRES16=r13, @ANYBLOB="04000000000000000000210000000500200069b6a4b8399bec07000000000a00010077"], 0x28}}, 0x0) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130448880000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xa) (async) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) (async) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x0, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) (async) r10 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x3644, 0x4}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r13}}) (async) syz_io_uring_submit(r5, r9, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0xe, 0x0, @fd_index=0x8, 0x7, 0x0, 0x5, 0x0, 0x1, {0x0, r13}}) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130434dd0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000895) 00:46:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3354f9af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x496951a3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dcb505}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378c7f9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5017e046}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x469baa2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541e07e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26916cf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fc73dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fa2eb09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc8d259}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3206523e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f5ee54b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74301a7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31215465}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000d9d6b04a71473332761fedca81c1c10ad65ffacd6bdcf9f21391e1a40eedb655f75b543d6d127cd31443b4bbe0ae623f728fdea7d9b39da87e78f70ff3495b41ea82c4d6c4e7ecbfaa21708a7e0e0889b10b3f78f3878eac78ee2a4d09e754f6aecb56c1d663b5f66c3f0f54901a55cf3f64074ff641d6155c031226a0c2af4ce4be3caecbf637973e45927ce4b29bd909ef0a6107df303d19b05383d8bb32ccad6a2a894ab2f59bac97", @ANYRES16=r3, @ANYBLOB="0100feffffff000000002100000005002000010000000a0001007770616e301e0000"], 0x28}, 0x1, 0x0, 0x0, 0x24044045}, 0x20000010) 00:46:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r5) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r6, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400400300000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000895) 00:46:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r5) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r6, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 00:46:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3354f9af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x496951a3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dcb505}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378c7f9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5017e046}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x469baa2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541e07e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26916cf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fc73dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fa2eb09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc8d259}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3206523e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f5ee54b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74301a7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31215465}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000d9d6b04a71473332761fedca81c1c10ad65ffacd6bdcf9f21391e1a40eedb655f75b543d6d127cd31443b4bbe0ae623f728fdea7d9b39da87e78f70ff3495b41ea82c4d6c4e7ecbfaa21708a7e0e0889b10b3f78f3878eac78ee2a4d09e754f6aecb56c1d663b5f66c3f0f54901a55cf3f64074ff641d6155c031226a0c2af4ce4be3caecbf637973e45927ce4b29bd909ef0a6107df303d19b05383d8bb32ccad6a2a894ab2f59bac97", @ANYRES16=r3, @ANYBLOB="0100feffffff000000002100000005002000010000000a0001007770616e301e0000"], 0x28}, 0x1, 0x0, 0x0, 0x24044045}, 0x20000010) 00:46:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000895) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400034000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r5) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r6, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r5) (async) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r6, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00=#', @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf252500000008002f000a0f000008002f0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:46:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) syz_io_uring_setup(0x6de6, &(0x7f0000000300)={0x0, 0x222f, 0x0, 0x1, 0x2a6, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000140)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) fremovexattr(r3, &(0x7f0000000480)=@random={'btrfs.', '/dev/ptmx\x00'}) syz_io_uring_submit(r7, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x24, 0x0, r2, &(0x7f0000000200)={0x50000003}, r8, 0x3, 0x0, 0x1}) 00:46:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3354f9af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x496951a3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dcb505}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378c7f9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5017e046}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x469baa2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541e07e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26916cf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fc73dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fa2eb09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc8d259}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3206523e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f5ee54b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74301a7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31215465}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000d9d6b04a71473332761fedca81c1c10ad65ffacd6bdcf9f21391e1a40eedb655f75b543d6d127cd31443b4bbe0ae623f728fdea7d9b39da87e78f70ff3495b41ea82c4d6c4e7ecbfaa21708a7e0e0889b10b3f78f3878eac78ee2a4d09e754f6aecb56c1d663b5f66c3f0f54901a55cf3f64074ff641d6155c031226a0c2af4ce4be3caecbf637973e45927ce4b29bd909ef0a6107df303d19b05383d8bb32ccad6a2a894ab2f59bac97", @ANYRES16=r3, @ANYBLOB="0100feffffff000000002100000005002000010000000a0001007770616e301e0000"], 0x28}, 0x1, 0x0, 0x0, 0x24044045}, 0x20000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3354f9af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x496951a3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dcb505}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378c7f9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5017e046}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x469baa2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541e07e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26916cf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fc73dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fa2eb09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc8d259}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3206523e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f5ee54b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74301a7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31215465}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000d9d6b04a71473332761fedca81c1c10ad65ffacd6bdcf9f21391e1a40eedb655f75b543d6d127cd31443b4bbe0ae623f728fdea7d9b39da87e78f70ff3495b41ea82c4d6c4e7ecbfaa21708a7e0e0889b10b3f78f3878eac78ee2a4d09e754f6aecb56c1d663b5f66c3f0f54901a55cf3f64074ff641d6155c031226a0c2af4ce4be3caecbf637973e45927ce4b29bd909ef0a6107df303d19b05383d8bb32ccad6a2a894ab2f59bac97", @ANYRES16=r3, @ANYBLOB="0100feffffff000000002100000005002000010000000a0001007770616e301e0000"], 0x28}, 0x1, 0x0, 0x0, 0x24044045}, 0x20000010) (async) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000001000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00=#', @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf252500000008002f000a0f000008002f0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:46:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000002000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40400c0}, 0x21) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a3b32266", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2502000000"], 0x14}}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000353b1c9fee0fc71a5a47f206f43e8fec7e6beec2f78be143bca009b99ddbcc3ba3794fb630"], 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc0}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ab098d26401b01075dba824e924aba782327eac3e8f315614184eaf6c388db3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d37adc386fbdce094f5c699a7722f0b2d906889aca517502efcd9b1ca887819a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040851}, 0x8880) 00:46:59 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00=#', @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf252500000008002f000a0f000008002f0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00=#', @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf252500000008002f000a0f000008002f0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) (async) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000003000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000004000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:46:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000800}, 0x24004080) [ 1354.150001][T26131] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) syz_io_uring_setup(0x6de6, &(0x7f0000000300)={0x0, 0x222f, 0x0, 0x1, 0x2a6, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000140)) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) (async) fremovexattr(r3, &(0x7f0000000480)=@random={'btrfs.', '/dev/ptmx\x00'}) syz_io_uring_submit(r7, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x24, 0x0, r2, &(0x7f0000000200)={0x50000003}, r8, 0x3, 0x0, 0x1}) 00:47:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40400c0}, 0x21) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a3b32266", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2502000000"], 0x14}}, 0x50) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000353b1c9fee0fc71a5a47f206f43e8fec7e6beec2f78be143bca009b99ddbcc3ba3794fb630"], 0x28}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc0}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ab098d26401b01075dba824e924aba782327eac3e8f315614184eaf6c388db3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d37adc386fbdce094f5c699a7722f0b2d906889aca517502efcd9b1ca887819a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040851}, 0x8880) 00:47:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:47:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000005000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000800}, 0x24004080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x804) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) (async) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000800}, 0x24004080) (async) 00:47:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc011) 00:47:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000006000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) syz_io_uring_setup(0x6de6, &(0x7f0000000300)={0x0, 0x222f, 0x0, 0x1, 0x2a6, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000140)) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) fremovexattr(r3, &(0x7f0000000480)=@random={'btrfs.', '/dev/ptmx\x00'}) (async) syz_io_uring_submit(r7, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x24, 0x0, r2, &(0x7f0000000200)={0x50000003}, r8, 0x3, 0x0, 0x1}) 00:47:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000007000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) ppoll(&(0x7f0000000000)=[{r0}, {r2, 0x9000}, {r0, 0xe060}, {r0}, {r3, 0xa000}, {r2, 0x10}], 0x6, &(0x7f0000000140), &(0x7f0000000300)={[0x9]}, 0x8) r5 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000008000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x800) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008044}, 0x40000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000009000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40400c0}, 0x21) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a3b32266", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2502000000"], 0x14}}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000353b1c9fee0fc71a5a47f206f43e8fec7e6beec2f78be143bca009b99ddbcc3ba3794fb630"], 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc0}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ab098d26401b01075dba824e924aba782327eac3e8f315614184eaf6c388db3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d37adc386fbdce094f5c699a7722f0b2d906889aca517502efcd9b1ca887819a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040851}, 0x8880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40400c0}, 0x21) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a3b32266", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2502000000"], 0x14}}, 0x50) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000353b1c9fee0fc71a5a47f206f43e8fec7e6beec2f78be143bca009b99ddbcc3ba3794fb630"], 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc0}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ab098d26401b01075dba824e924aba782327eac3e8f315614184eaf6c388db3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d37adc386fbdce094f5c699a7722f0b2d906889aca517502efcd9b1ca887819a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040851}, 0x8880) (async) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000a000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x804) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000800}, 0x24004080) 00:47:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r14) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc011) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc011) 00:47:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (rerun: 32) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x800) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008044}, 0x40000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000b000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20000840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008001) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0000003e046168710385"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r12 = getpid() sched_setaffinity(r12, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x4) r13 = getpid() sched_setaffinity(r13, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x4) pidfd_open(r13, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20040801) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="f7c7a5f05891d7fe914d58ec952be9b0f4be9fe86694fe5b3de63537344b815dedaa7de0526cab6ecb669729dd21d06540340bb8f9b428b95e324e16283d76d58aa669bdbcef6e8580d27ccab0a30f0df3b9b692e92dfcd3f73e4d0f2193294c9de1a25d744af639637b1c9bff5e7f16a7ab1403cc59e200"/135, @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) ppoll(&(0x7f0000000000)=[{r0}, {r2, 0x9000}, {r0, 0xe060}, {r0}, {r3, 0xa000}, {r2, 0x10}], 0x6, &(0x7f0000000140), &(0x7f0000000300)={[0x9]}, 0x8) r5 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1355.779429][T26225] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000c000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000d000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000e000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000f000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000010000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x800) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008044}, 0x40000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x800) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008044}, 0x40000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:47:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) (async) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r14) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc011) [ 1355.905631][T26233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1355.932109][T26254] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:47:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x20, 0x70bd23, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000002}, 0x4048041) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xce}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000011000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (rerun: 64) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) ppoll(&(0x7f0000000000)=[{r0}, {r2, 0x9000}, {r0, 0xe060}, {r0}, {r3, 0xa000}, {r2, 0x10}], 0x6, &(0x7f0000000140), &(0x7f0000000300)={[0x9]}, 0x8) (async) r5 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (rerun: 64) 00:47:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x20, 0x70bd23, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000002}, 0x4048041) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}}, 0x800) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xce}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 00:47:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20000840) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20000840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008001) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0000003e046168710385"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0000003e046168710385"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r12 = getpid() sched_setaffinity(r12, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(r12, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x4) getpid() (async) r13 = getpid() sched_setaffinity(r13, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x4) pidfd_open(r13, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20040801) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="f7c7a5f05891d7fe914d58ec952be9b0f4be9fe86694fe5b3de63537344b815dedaa7de0526cab6ecb669729dd21d06540340bb8f9b428b95e324e16283d76d58aa669bdbcef6e8580d27ccab0a30f0df3b9b692e92dfcd3f73e4d0f2193294c9de1a25d744af639637b1c9bff5e7f16a7ab1403cc59e200"/135, @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) [ 1355.979890][T26281] __nla_validate_parse: 32 callbacks suppressed [ 1355.979911][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000012000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000025000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1356.031322][T26284] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1356.032824][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1356.069298][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x2000, 0x8bbc, 0x1, 0x0, 0x6, "6cec2374a4a41ec03103df9e46cf91144e9b03"}) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x231}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) io_uring_enter(r7, 0x9a2, 0x9f8, 0x10, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x7e, 0x4000, @fd_index=0x8, 0x8, 0x0, 0x0, 0xe, 0x1, {0x2}}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400003641000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000048000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1356.138533][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1356.163322][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="2fc6986b", @ANYRES16=r2, @ANYBLOB="0100009ff758915143031dac0100000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000f705a2f2f198ab9ba38aa7ce95bcc44385a040e2ea3c14ffc96b88599b8a84e5ae9929db9099eafb30290a2e0e9a33ed5d96db456cf6fde29d675d3dd5fbead304fce106fe2cb265db710421685c81691b15524d7973db6d94c717b88b611710b76d932ace71f4601e7ce1d6"], 0x34}}, 0x0) [ 1356.188480][T26330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1356.188484][T26284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000004c000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x20, 0x70bd23, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000002}, 0x4048041) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xce}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 00:47:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20000840) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008001) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0000003e046168710385"], 0x7c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (rerun: 32) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r12 = getpid() sched_setaffinity(r12, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) r13 = getpid() (rerun: 32) sched_setaffinity(r13, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x4) (rerun: 32) pidfd_open(r13, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20040801) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="f7c7a5f05891d7fe914d58ec952be9b0f4be9fe86694fe5b3de63537344b815dedaa7de0526cab6ecb669729dd21d06540340bb8f9b428b95e324e16283d76d58aa669bdbcef6e8580d27ccab0a30f0df3b9b692e92dfcd3f73e4d0f2193294c9de1a25d744af639637b1c9bff5e7f16a7ab1403cc59e200"/135, @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="2fc6986b", @ANYRES16=r2, @ANYBLOB="0100009ff758915143031dac0100000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000f705a2f2f198ab9ba38aa7ce95bcc44385a040e2ea3c14ffc96b88599b8a84e5ae9929db9099eafb30290a2e0e9a33ed5d96db456cf6fde29d675d3dd5fbead304fce106fe2cb265db710421685c81691b15524d7973db6d94c717b88b611710b76d932ace71f4601e7ce1d6"], 0x34}}, 0x0) [ 1356.288791][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000060000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="2fc6986b", @ANYRES16=r2, @ANYBLOB="0100009ff758915143031dac0100000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000f705a2f2f198ab9ba38aa7ce95bcc44385a040e2ea3c14ffc96b88599b8a84e5ae9929db9099eafb30290a2e0e9a33ed5d96db456cf6fde29d675d3dd5fbead304fce106fe2cb265db710421685c81691b15524d7973db6d94c717b88b611710b76d932ace71f4601e7ce1d6"], 0x34}}, 0x0) 00:47:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x0) 00:47:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000741595d91551ee8400d997a303e8bc5ea9a10151efa4a18e88b04867d1582c79d224c436dd64f09cc90110d6dd31b3d7737806d1e70c763716d54814f38aad505b4b4763e23ae57b99b858e61a31ab729d4140c94a32589e806a07b6702bf1df3c976157e61022d3c99dca1b434499579cd99f1cbe14ede1c8ca9fe0cac0587a6a514f383755df41e81edff003d011b67e77073d87886c5c21679762352d28d6cd6ac5b51f76a2d1cefaa2b14727b129f9daa4b2eac88d90f4a5942707fa3ef8818b736562b951d40b0658cc871f75b516", @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) [ 1356.381143][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x2000, 0x8bbc, 0x1, 0x0, 0x6, "6cec2374a4a41ec03103df9e46cf91144e9b03"}) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x231}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x231}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) io_uring_enter(r7, 0x9a2, 0x9f8, 0x10, &(0x7f0000000340)={[0x7]}, 0x8) (async) io_uring_enter(r7, 0x9a2, 0x9f8, 0x10, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x7e, 0x4000, @fd_index=0x8, 0x8, 0x0, 0x0, 0xe, 0x1, {0x2}}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x0) (async) 00:47:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000741595d91551ee8400d997a303e8bc5ea9a10151efa4a18e88b04867d1582c79d224c436dd64f09cc90110d6dd31b3d7737806d1e70c763716d54814f38aad505b4b4763e23ae57b99b858e61a31ab729d4140c94a32589e806a07b6702bf1df3c976157e61022d3c99dca1b434499579cd99f1cbe14ede1c8ca9fe0cac0587a6a514f383755df41e81edff003d011b67e77073d87886c5c21679762352d28d6cd6ac5b51f76a2d1cefaa2b14727b129f9daa4b2eac88d90f4a5942707fa3ef8818b736562b951d40b0658cc871f75b516", @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000741595d91551ee8400d997a303e8bc5ea9a10151efa4a18e88b04867d1582c79d224c436dd64f09cc90110d6dd31b3d7737806d1e70c763716d54814f38aad505b4b4763e23ae57b99b858e61a31ab729d4140c94a32589e806a07b6702bf1df3c976157e61022d3c99dca1b434499579cd99f1cbe14ede1c8ca9fe0cac0587a6a514f383755df41e81edff003d011b67e77073d87886c5c21679762352d28d6cd6ac5b51f76a2d1cefaa2b14727b129f9daa4b2eac88d90f4a5942707fa3ef8818b736562b951d40b0658cc871f75b516", @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) (async) 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400005865000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x4040004) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000009b901390a5b491f21765c372518c58b0d14ee1e207212de92642566cc93bcffd62659d23f8f77070a45b7cb37d09c98b69d3a73d81b9c5d51336cfb44d72b878d8cada9b3d6dbef9eab767a2191ac8c175092eabafe3eebb", @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r9, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x401004c}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000741595d91551ee8400d997a303e8bc5ea9a10151efa4a18e88b04867d1582c79d224c436dd64f09cc90110d6dd31b3d7737806d1e70c763716d54814f38aad505b4b4763e23ae57b99b858e61a31ab729d4140c94a32589e806a07b6702bf1df3c976157e61022d3c99dca1b434499579cd99f1cbe14ede1c8ca9fe0cac0587a6a514f383755df41e81edff003d011b67e77073d87886c5c21679762352d28d6cd6ac5b51f76a2d1cefaa2b14727b129f9daa4b2eac88d90f4a5942707fa3ef8818b736562b951d40b0658cc871f75b516", @ANYRES16=r4, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x0) (async) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) [ 1357.032439][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x4040004) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x4040004) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000009b901390a5b491f21765c372518c58b0d14ee1e207212de92642566cc93bcffd62659d23f8f77070a45b7cb37d09c98b69d3a73d81b9c5d51336cfb44d72b878d8cada9b3d6dbef9eab767a2191ac8c175092eabafe3eebb", @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000009b901390a5b491f21765c372518c58b0d14ee1e207212de92642566cc93bcffd62659d23f8f77070a45b7cb37d09c98b69d3a73d81b9c5d51336cfb44d72b878d8cada9b3d6dbef9eab767a2191ac8c175092eabafe3eebb", @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r9, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r9, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x401004c}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000010000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x2000, 0x8bbc, 0x1, 0x0, 0x6, "6cec2374a4a41ec03103df9e46cf91144e9b03"}) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x231}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) io_uring_enter(r7, 0x9a2, 0x9f8, 0x10, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x7e, 0x4000, @fd_index=0x8, 0x8, 0x0, 0x0, 0xe, 0x1, {0x2}}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x2000, 0x8bbc, 0x1, 0x0, 0x6, "6cec2374a4a41ec03103df9e46cf91144e9b03"}) (async) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x231}, &(0x7f0000000040), &(0x7f0000000180)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) (async) io_uring_enter(r7, 0x9a2, 0x9f8, 0x10, &(0x7f0000000340)={[0x7]}, 0x8) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x7e, 0x4000, @fd_index=0x8, 0x8, 0x0, 0x0, 0xe, 0x1, {0x2}}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000068000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x40c4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x574}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r7, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x6040813) 00:47:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000010000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000010000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x240080c0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x20004000) 00:47:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x4040004) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4008000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000009b901390a5b491f21765c372518c58b0d14ee1e207212de92642566cc93bcffd62659d23f8f77070a45b7cb37d09c98b69d3a73d81b9c5d51336cfb44d72b878d8cada9b3d6dbef9eab767a2191ac8c175092eabafe3eebb", @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r9, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x401004c}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000006c000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x40c4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x574}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r7, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x6040813) 00:47:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000010000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000010000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) [ 1357.213038][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000074000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x240080c0}, 0x10) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x240080c0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x20004000) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x40c4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x574}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r7, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x6040813) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x40c4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x574}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r7, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x6040813) (async) [ 1357.268353][T26420] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="010900000000000d001f0070660300000000000000aaf74528492ea06c22988e5ae84a337969caf69499b684621ab074b9d96edf"], 0x28}}, 0x0) 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000007a000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x20040800) 00:47:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x8000) 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000081000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (rerun: 32) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x240080c0}, 0x10) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x20004000) [ 1357.360226][T26449] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x8000) 00:47:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x20040800) 00:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004788000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async, rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x8000) (rerun: 64) 00:47:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004888000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x20040800) 00:47:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) (async) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (rerun: 32) 00:47:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="010900000000000d001f0070660300000000000000aaf74528492ea06c22988e5ae84a337969caf69499b684621ab074b9d96edf"], 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="010900000000000d001f0070660300000000000000aaf74528492ea06c22988e5ae84a337969caf69499b684621ab074b9d96edf"], 0x28}}, 0x0) (async) 00:47:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304ffffa888000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r6, @ANYRESOCT=r4, @ANYBLOB="010000000c0005000000000000000000050020000000000009001f0070687930000000004dfc321423cb51b00314644e05e204c0ed0d7d4e8d", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000034dd000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304ffffffea000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304fffffff0000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r2, r3, &(0x7f00000003c0)=0x8000000000000001, 0x5) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x204, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "ed1f62e9a1bdce334c813d89be6a144b3e85f6e32637703391480aad52416cb524551a77cb6b2e226d4adb1e2900e268f473a688b55ff3ef5b59860400cc4f652a025242ace0c178d11e9a4be8da3b595df08986831ead9c7f2510b6260346dcbc1b52ab8d6b502eba59545b38da8170fbb2fae7c896cd0ed39d4d4df2de158fe76573171125a9577dad53c0ca"}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "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"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x14, r8, 0x1}, 0x14}}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304fffffffe000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:03 executing program 5: bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x7}, 0x4}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20eb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8801) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000004000000000000400000008000100000000000c000a000000dd0700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000c789a954c1df8d877894233bcb543bee59afd1637da22115951f000000000000001c451b07754c573c33d0bbabf4f97a7000"/66, @ANYRES16=r5, @ANYBLOB="010000000000000000000480000008350000000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x64, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048005}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf350300000014000500ff010000000000000000000000000001080004000100000014000600fe80e7ffffff000000000000000000aa06000b0000000000140006000108000800ac1414aa00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x28}}, 0x0) 00:47:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r3, r0, 0x0) (async) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="010900000000000d001f0070660300000000000000aaf74528492ea06c22988e5ae84a337969caf69499b684621ab074b9d96edf"], 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="010900000000000d001f0070660300000000000000aaf74528492ea06c22988e5ae84a337969caf69499b684621ab074b9d96edf"], 0x28}}, 0x0) 00:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130488a8ffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1358.559504][T26545] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:47:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r6, @ANYRESOCT=r4, @ANYBLOB="010000000c0005000000000000000000050020000000000009001f0070687930000000004dfc321423cb51b00314644e05e204c0ed0d7d4e8d", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013047fffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:04 executing program 5: bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x7}, 0x4}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x7}, 0x4}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20eb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8801) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000004000000000000400000008000100000000000c000a000000dd0700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000004000000000000400000008000100000000000c000a000000dd0700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000c789a954c1df8d877894233bcb543bee59afd1637da22115951f000000000000001c451b07754c573c33d0bbabf4f97a7000"/66, @ANYRES16=r5, @ANYBLOB="010000000000000000000480000008350000000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x64, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048005}, 0x10) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x64, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048005}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf350300000014000500ff010000000000000000000000000001080004000100000014000600fe80e7ffffff000000000000000000aa06000b0000000000140006000108000800ac1414aa00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$NLBL_MGMT_C_LISTALL(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf350300000014000500ff010000000000000000000000000001080004000100000014000600fe80e7ffffff000000000000000000aa06000b0000000000140006000108000800ac1414aa00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x28}}, 0x0) 00:47:04 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:47:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xb4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000002d00140029bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="f3ff080003000c00e0ff0b0006000500280200000c00050006010000"], 0x34}, 0x1, 0x0, 0x0, 0x4851}, 0x10) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304eaffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1358.857561][T26571] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1358.871165][T26570] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:47:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r2, r3, &(0x7f00000003c0)=0x8000000000000001, 0x5) (async) sendfile(r2, r3, &(0x7f00000003c0)=0x8000000000000001, 0x5) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x204, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "ed1f62e9a1bdce334c813d89be6a144b3e85f6e32637703391480aad52416cb524551a77cb6b2e226d4adb1e2900e268f473a688b55ff3ef5b59860400cc4f652a025242ace0c178d11e9a4be8da3b595df08986831ead9c7f2510b6260346dcbc1b52ab8d6b502eba59545b38da8170fbb2fae7c896cd0ed39d4d4df2de158fe76573171125a9577dad53c0ca"}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "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"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r6) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x14, r8, 0x1}, 0x14}}, 0x0) 00:47:04 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304f0ffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r6, @ANYRESOCT=r4, @ANYBLOB="010000000c0005000000000000000000050020000000000009001f0070687930000000004dfc321423cb51b00314644e05e204c0ed0d7d4e8d", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 00:47:04 executing program 5: bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x7}, 0x4}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20eb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8801) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000004000000000000400000008000100000000000c000a000000dd0700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000c789a954c1df8d877894233bcb543bee59afd1637da22115951f000000000000001c451b07754c573c33d0bbabf4f97a7000"/66, @ANYRES16=r5, @ANYBLOB="010000000000000000000480000008350000000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x64, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048005}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf350300000014000500ff010000000000000000000000000001080004000100000014000600fe80e7ffffff000000000000000000aa06000b0000000000140006000108000800ac1414aa00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$NLBL_MGMT_C_LISTALL(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf350300000014000500ff010000000000000000000000000001080004000100000014000600fe80e7ffffff000000000000000000aa06000b0000000000140006000108000800ac1414aa00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x28}}, 0x0) 00:47:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xb4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000002d00140029bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="f3ff080003000c00e0ff0b0006000500280200000c00050006010000"], 0x34}, 0x1, 0x0, 0x0, 0x4851}, 0x10) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304feffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000340000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:04 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:47:04 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x6c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x25}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}, @increfs_done, @register_looper], 0x28, 0x0, &(0x7f0000000140)="7bbf5346ed44f41b92e4e7c5ba66ed1c2c1041ab71850816a29f9c5403143bca7da27024ffc6db7b"}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000010a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000020a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1359.375333][T26599] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:47:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000440)) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xb4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) (async) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000002d00140029bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="f3ff080003000c00e0ff0b0006000500280200000c00050006010000"], 0x34}, 0x1, 0x0, 0x0, 0x4851}, 0x10) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r2, r3, &(0x7f00000003c0)=0x8000000000000001, 0x5) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x204, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "ed1f62e9a1bdce334c813d89be6a144b3e85f6e32637703391480aad52416cb524551a77cb6b2e226d4adb1e2900e268f473a688b55ff3ef5b59860400cc4f652a025242ace0c178d11e9a4be8da3b595df08986831ead9c7f2510b6260346dcbc1b52ab8d6b502eba59545b38da8170fbb2fae7c896cd0ed39d4d4df2de158fe76573171125a9577dad53c0ca"}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "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"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x14, r8, 0x1}, 0x14}}, 0x0) 00:47:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x86}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c844}, 0x4040) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000030a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYBLOB="73c2c7f812b2fbda641203fa0a02a6ac72943688ce5b670379df838a1d444a90daca95de376efef06c653561f4326a49af0185f9fb3185db729b3f7a119d138adb33d68c76086620daa2ee0ec93228633992947be7de09085b8bc44ed8a106584c06b4f9e515c99a304503e3d59dbb05a9f5f68c7afbade7feb6870aed8db489", @ANYRESDEC=r5, @ANYRESHEX=r7, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440400c0}, 0x48080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001300)={0x2880008, r9}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000041402002bbd7000fddbdf250800010001000000d42b27"], 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x40800) 00:47:05 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x6c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x25}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}, @increfs_done, @register_looper], 0x28, 0x0, &(0x7f0000000140)="7bbf5346ed44f41b92e4e7c5ba66ed1c2c1041ab71850816a29f9c5403143bca7da27024ffc6db7b"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x6c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x25}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}, @increfs_done, @register_looper], 0x28, 0x0, &(0x7f0000000140)="7bbf5346ed44f41b92e4e7c5ba66ed1c2c1041ab71850816a29f9c5403143bca7da27024ffc6db7b"}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x6c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x25}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}, @increfs_done, @register_looper], 0x28, 0x0, &(0x7f0000000140)="7bbf5346ed44f41b92e4e7c5ba66ed1c2c1041ab71850816a29f9c5403143bca7da27024ffc6db7b"}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000040a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x86}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c844}, 0x4040) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000050a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x1080}, 0x804) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="280002d714ae23000000000000000055235f166324e673083bc7d35f99cd6d84470a4c439e51544574aa1bf993a12150ed80c0f05abc3fc6b502e578e02ae9a203cec95007e1be8065015147770447308557463a5882f7e5c9350f129f56a7c830e2ed6ea8d59bef297592f8228708289ed780caeac6895e5d2282b56adf31110e3926c747d3f515af218593792b86a8b804c1038ad6ee230af7b5eefbd7405909e21ef818b3d9da73f8768d1eb555a0110d547d4a2341b024da9aa81689d7fe932c18047a08cdbaf4477d32676a773c7ad053f73f605cdc8ac7a862a26e7d0272faf48800c6e49b5febf9bc519d291397de2d79bdff6603a8dfe494574892f3e25351eb9080418a3186ffb4b251d20ea65c89dbef74ddca942c42bf70ac2901dfcf6e33b0e5ead25bd600"/308, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x86}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c844}, 0x4040) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000060a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x1080}, 0x804) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000070a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x1080}, 0x804) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x500000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0xffffffffffffffc8, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x44, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {0x0, 0x1, r7}, {}, {}, {}, {0x0, 0x1, r9}]}, @NBD_ATTR_SIZE_BYTES={0x0, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000080) 00:47:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYBLOB="73c2c7f812b2fbda641203fa0a02a6ac72943688ce5b670379df838a1d444a90daca95de376efef06c653561f4326a49af0185f9fb3185db729b3f7a119d138adb33d68c76086620daa2ee0ec93228633992947be7de09085b8bc44ed8a106584c06b4f9e515c99a304503e3d59dbb05a9f5f68c7afbade7feb6870aed8db489", @ANYRESDEC=r5, @ANYRESHEX=r7, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440400c0}, 0x48080) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001300)={0x2880008, r9}) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000041402002bbd7000fddbdf250800010001000000d42b27"], 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x40800) 00:47:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="280002d714ae23000000000000000055235f166324e673083bc7d35f99cd6d84470a4c439e51544574aa1bf993a12150ed80c0f05abc3fc6b502e578e02ae9a203cec95007e1be8065015147770447308557463a5882f7e5c9350f129f56a7c830e2ed6ea8d59bef297592f8228708289ed780caeac6895e5d2282b56adf31110e3926c747d3f515af218593792b86a8b804c1038ad6ee230af7b5eefbd7405909e21ef818b3d9da73f8768d1eb555a0110d547d4a2341b024da9aa81689d7fe932c18047a08cdbaf4477d32676a773c7ad053f73f605cdc8ac7a862a26e7d0272faf48800c6e49b5febf9bc519d291397de2d79bdff6603a8dfe494574892f3e25351eb9080418a3186ffb4b251d20ea65c89dbef74ddca942c42bf70ac2901dfcf6e33b0e5ead25bd600"/308, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000080a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x351c24890730af75}, 0x40040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000090a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/308, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (rerun: 64) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async, rerun: 32) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x351c24890730af75}, 0x40040) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000a0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x200, 0x6aa, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5ddc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="340016008416db477945ac5e6ca986fa6d1d516f0124ba5ccb5b8ab2c850cc669a3c6da2975931fce445230234652efec54b984b6149c1c99255b0809c7f927075f0ff49d788e77e0decd8451c2a7e31d07700247996cda15afff8b0b821a56f1a5fad7c065e7bf4b513aeea73f2fadae072db92604ac3710cdc7b", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000b0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1360.515323][T26737] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x500000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0xffffffffffffffc8, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x44, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {0x0, 0x1, r7}, {}, {}, {}, {0x0, 0x1, r9}]}, @NBD_ATTR_SIZE_BYTES={0x0, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x500000, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0xffffffffffffffc8, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x44, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {0x0, 0x1, r7}, {}, {}, {}, {0x0, 0x1, r9}]}, @NBD_ATTR_SIZE_BYTES={0x0, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000080) (async) 00:47:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000c0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x200, 0x6aa, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5ddc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="340016008416db477945ac5e6ca986fa6d1d516f0124ba5ccb5b8ab2c850cc669a3c6da2975931fce445230234652efec54b984b6149c1c99255b0809c7f927075f0ff49d788e77e0decd8451c2a7e31d07700247996cda15afff8b0b821a56f1a5fad7c065e7bf4b513aeea73f2fadae072db92604ac3710cdc7b", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) (async, rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYBLOB="73c2c7f812b2fbda641203fa0a02a6ac72943688ce5b670379df838a1d444a90daca95de376efef06c653561f4326a49af0185f9fb3185db729b3f7a119d138adb33d68c76086620daa2ee0ec93228633992947be7de09085b8bc44ed8a106584c06b4f9e515c99a304503e3d59dbb05a9f5f68c7afbade7feb6870aed8db489", @ANYRESDEC=r5, @ANYRESHEX=r7, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440400c0}, 0x48080) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 32) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001300)={0x2880008, r9}) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000041402002bbd7000fddbdf250800010001000000d42b27"], 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x40800) 00:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x351c24890730af75}, 0x40040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e21, @multicast1}}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) io_uring_enter(r7, 0x6f80, 0x2a3a, 0x1a, &(0x7f0000000200)={[0x3]}, 0x8) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x200, 0x6aa, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5ddc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044000) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="340016008416db477945ac5e6ca986fa6d1d516f0124ba5ccb5b8ab2c850cc669a3c6da2975931fce445230234652efec54b984b6149c1c99255b0809c7f927075f0ff49d788e77e0decd8451c2a7e31d07700247996cda15afff8b0b821a56f1a5fad7c065e7bf4b513aeea73f2fadae072db92604ac3710cdc7b", @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000d0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48841}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x6687d94913e0c73a}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:47:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x300, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x4000000) 00:47:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000e0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1360.752527][T26772] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48841}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x6687d94913e0c73a}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48841}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x6687d94913e0c73a}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) 00:47:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004004) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) (async, rerun: 32) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x500000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async, rerun: 64) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0xffffffffffffffc8, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x44, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {0x0, 0x1, r7}, {}, {}, {}, {0x0, 0x1, r9}]}, @NBD_ATTR_SIZE_BYTES={0x0, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000080) (rerun: 64) 00:47:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000f0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x300, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x4000000) 00:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48841}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x6687d94913e0c73a}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) [ 1361.075011][T26805] __nla_validate_parse: 35 callbacks suppressed [ 1361.075036][T26805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1361.127700][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1361.136994][T26813] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.5'. 00:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x81) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x518, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x24891) 00:47:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x300, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x4000000) 00:47:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000100a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x2, 0x3, 0x25dfdbfc}, 0x14}}, 0x0) 00:47:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e21, @multicast1}}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) io_uring_enter(r7, 0x6f80, 0x2a3a, 0x1a, &(0x7f0000000200)={[0x3]}, 0x8) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e21, @multicast1}}) (async) syz_open_pts(r0, 0x0) (async) dup3(r2, r0, 0x0) (async) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) (async) io_uring_enter(r7, 0x6f80, 0x2a3a, 0x1a, &(0x7f0000000200)={[0x3]}, 0x8) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x2, 0x3, 0x25dfdbfc}, 0x14}}, 0x0) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000110a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x81) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x518, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x24891) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x81) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x518, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x24891) (async) [ 1361.572353][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x2, 0x3, 0x25dfdbfc}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x2, 0x3, 0x25dfdbfc}, 0x14}}, 0x0) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00009aaf051f0000001a00000000"], 0x14}, 0x1, 0x0, 0x0, 0x6004030}, 0x0) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000120a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1361.637278][T26836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x81) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x518, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x24891) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) [ 1361.731913][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:07 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e21, @multicast1}}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) io_uring_enter(r7, 0x6f80, 0x2a3a, 0x1a, &(0x7f0000000200)={[0x3]}, 0x8) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00009aaf051f0000001a00000000"], 0x14}, 0x1, 0x0, 0x0, 0x6004030}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00009aaf051f0000001a00000000"], 0x14}, 0x1, 0x0, 0x0, 0x6004030}, 0x0) (async) 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01478e6742bb2bd77bf12a00b2a2e29985bc6f49f36fa955afa27c1a5f46f32289986c4617c90396eb70d91f0966b9e2c066b09f119cbec09acf8ba09d4c040000000000007e3d6291e0f50b46517342d5bd8f24ea9c0b493d0d9ccb55d61611aaea7dc30a4988f1d693e5d6f7d3add9e00ce63d7502870c855382b71f73109bf53a5633a32e4db06b92851f1096f601193461299613226984d2eb59a53f24068d995ac0c58b7dc584c7a0aa7373074da451a43149ac3971014a020d5593e840e8ef8919bd3c5cd71d39e6d8012845d92d6e115184c5ccc7381d8cb29e"], 0x50}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8ffacc4c5de4ed40838864a6e80a77", @ANYRES16=r5, @ANYBLOB="01004424bdc131c7cf0b6de6578eb94f25d3bf27a4fd"], 0x1c}, 0x1, 0x0, 0x0, 0x9050}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r5, 0x508, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40040d0) 00:47:07 executing program 2: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x4004011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000250a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x55]}, 0x8, 0x80000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}]}, 0x30}}, 0x800) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000036410a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x55]}, 0x8, 0x80000) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}]}, 0x30}}, 0x800) 00:47:07 executing program 2: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x4004011) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x4004011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) (async) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00009aaf051f0000001a00000000"], 0x14}, 0x1, 0x0, 0x0, 0x6004030}, 0x0) 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01478e6742bb2bd77bf12a00b2a2e29985bc6f49f36fa955afa27c1a5f46f32289986c4617c90396eb70d91f0966b9e2c066b09f119cbec09acf8ba09d4c040000000000007e3d6291e0f50b46517342d5bd8f24ea9c0b493d0d9ccb55d61611aaea7dc30a4988f1d693e5d6f7d3add9e00ce63d7502870c855382b71f73109bf53a5633a32e4db06b92851f1096f601193461299613226984d2eb59a53f24068d995ac0c58b7dc584c7a0aa7373074da451a43149ac3971014a020d5593e840e8ef8919bd3c5cd71d39e6d8012845d92d6e115184c5ccc7381d8cb29e"], 0x50}}, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8ffacc4c5de4ed40838864a6e80a77", @ANYRES16=r5, @ANYBLOB="01004424bdc131c7cf0b6de6578eb94f25d3bf27a4fd"], 0x1c}, 0x1, 0x0, 0x0, 0x9050}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r5, 0x508, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40040d0) [ 1361.851411][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1361.867393][T26875] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x55]}, 0x8, 0x80000) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}]}, 0x30}}, 0x800) [ 1361.934197][T26893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543d5eea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b1a819c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f4bc1db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2288}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x272}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd710}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f194ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198b46f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x785b31a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8b0a7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e596e1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3513}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000480a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:07 executing program 2: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x4004011) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01478e6742bb2bd77bf12a00b2a2e29985bc6f49f36fa955afa27c1a5f46f32289986c4617c90396eb70d91f0966b9e2c066b09f119cbec09acf8ba09d4c040000000000007e3d6291e0f50b46517342d5bd8f24ea9c0b493d0d9ccb55d61611aaea7dc30a4988f1d693e5d6f7d3add9e00ce63d7502870c855382b71f73109bf53a5633a32e4db06b92851f1096f601193461299613226984d2eb59a53f24068d995ac0c58b7dc584c7a0aa7373074da451a43149ac3971014a020d5593e840e8ef8919bd3c5cd71d39e6d8012845d92d6e115184c5ccc7381d8cb29e"], 0x50}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8ffacc4c5de4ed40838864a6e80a77", @ANYRES16=r5, @ANYBLOB="01004424bdc131c7cf0b6de6578eb94f25d3bf27a4fd"], 0x1c}, 0x1, 0x0, 0x0, 0x9050}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r5, 0x508, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40040d0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01478e6742bb2bd77bf12a00b2a2e29985bc6f49f36fa955afa27c1a5f46f32289986c4617c90396eb70d91f0966b9e2c066b09f119cbec09acf8ba09d4c040000000000007e3d6291e0f50b46517342d5bd8f24ea9c0b493d0d9ccb55d61611aaea7dc30a4988f1d693e5d6f7d3add9e00ce63d7502870c855382b71f73109bf53a5633a32e4db06b92851f1096f601193461299613226984d2eb59a53f24068d995ac0c58b7dc584c7a0aa7373074da451a43149ac3971014a020d5593e840e8ef8919bd3c5cd71d39e6d8012845d92d6e115184c5ccc7381d8cb29e"], 0x50}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8ffacc4c5de4ed40838864a6e80a77", @ANYRES16=r5, @ANYBLOB="01004424bdc131c7cf0b6de6578eb94f25d3bf27a4fd"], 0x1c}, 0x1, 0x0, 0x0, 0x9050}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r5, 0x508, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40040d0) (async) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="3422cb09c999c8000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044104}, 0x34) 00:47:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r2, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x45, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)={0x200, 0x28}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x23456}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@ipv6_newnexthop={0x64, 0x68, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x3, 0x0, 0xc}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1000}}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="3422cb09c999c8000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044104}, 0x34) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000004c0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0x0, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xfffffffffffffff1, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}}, 0x0) 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543d5eea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b1a819c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f4bc1db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2288}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x272}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd710}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f194ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198b46f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x785b31a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8b0a7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e596e1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3513}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) [ 1362.104983][T26914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4881}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="3422cb09c999c8000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044104}, 0x34) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="3422cb09c999c8000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044104}, 0x34) (async) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000600a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async, rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0x0, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xfffffffffffffff1, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}}, 0x0) (rerun: 32) 00:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4881}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4881}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) 00:47:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543d5eea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b1a819c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f4bc1db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2288}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x272}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd710}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f194ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198b46f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x785b31a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8b0a7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e596e1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3513}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543d5eea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b1a819c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f4bc1db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2288}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x272}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd710}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f194ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198b46f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x785b31a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8b0a7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e596e1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3513}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8004) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) 00:47:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000058650a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r2, 0x10000000) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r2, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x45, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)={0x200, 0x28}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x23456}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@ipv6_newnexthop={0x64, 0x68, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x3, 0x0, 0xc}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1000}}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000680a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b0282a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x118ee9ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40bf39dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xed9ca97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7847086a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0b6b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6391a018}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c4b255}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c01b2be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42d7f2dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3461a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38186368}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d1b43bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad2cc22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x972df3f}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4881}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:08 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8841) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 00:47:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0x0, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xfffffffffffffff1, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}}, 0x0) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000006c0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b0282a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x118ee9ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40bf39dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xed9ca97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7847086a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0b6b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6391a018}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c4b255}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c01b2be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42d7f2dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3461a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38186368}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d1b43bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad2cc22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x972df3f}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:47:08 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8841) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8841) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000740a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b0282a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x118ee9ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40bf39dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xed9ca97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7847086a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0b6b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6391a018}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c4b255}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c01b2be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42d7f2dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3461a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38186368}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d1b43bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad2cc22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x972df3f}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b0282a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x118ee9ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40bf39dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xed9ca97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7847086a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0b6b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6391a018}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c4b255}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c01b2be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42d7f2dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3461a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38186368}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d1b43bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad2cc22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x972df3f}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (rerun: 64) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r2, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x45, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)={0x200, 0x28}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x23456}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@ipv6_newnexthop={0x64, 0x68, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x3, 0x0, 0xc}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1000}}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (rerun: 32) 00:47:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:47:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x2, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000004) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48081) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x1c801}, 0x80) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000007a0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8841) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 00:47:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fsync(r2) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000000810a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x2, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000004) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48081) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x1c801}, 0x80) 00:47:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x26, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd2c}, 0x14}}, 0x8014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0082e2c2b8bc57f715423ee761"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a0000000007000000002b852fd948350adb02095e821fb589bec5d2fa7b3eb2cdd71b836a5cc75f67809a9a035fadc3e2c2db1d39e652104b6a94d6c531d4c5c0606be04a7763e47a60c5858812b5d66cace7d96a94290aa3f1ee5029ab65c7e7"], 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x4040004) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 00:47:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28100000", @ANYRES8=r2, @ANYBLOB="01000000000000000000210000000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x2, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000004) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48081) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x1c801}, 0x80) 00:47:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x26, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd2c}, 0x14}}, 0x8014) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0082e2c2b8bc57f715423ee761"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a0000000007000000002b852fd948350adb02095e821fb589bec5d2fa7b3eb2cdd71b836a5cc75f67809a9a035fadc3e2c2db1d39e652104b6a94d6c531d4c5c0606be04a7763e47a60c5858812b5d66cace7d96a94290aa3f1ee5029ab65c7e7"], 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x4040004) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000047880a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28100000", @ANYRES8=r2, @ANYBLOB="01000000000000000000210000000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000048880a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fsync(r2) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28100000", @ANYRES8=r2, @ANYBLOB="01000000000000000000210000000000000009001f007068793000000000"], 0x28}}, 0x0) 00:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000ffffa8880a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:47:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x26, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd2c}, 0x14}}, 0x8014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0082e2c2b8bc57f715423ee761"], 0x7c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000100000000000c000a0000000007000000002b852fd948350adb02095e821fb589bec5d2fa7b3eb2cdd71b836a5cc75f67809a9a035fadc3e2c2db1d39e652104b6a94d6c531d4c5c0606be04a7763e47a60c5858812b5d66cace7d96a94290aa3f1ee5029ab65c7e7"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x4040004) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 00:47:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008}, 0x40) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r16) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r16) sendmsg$NBD_CMD_STATUS(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002cbd0000000000000000000008000100000000000c0006000300000000000000"], 0x28}, 0x1, 0x3000000000000, 0x0, 0x2400c895}, 0x0) sendmsg$IEEE802154_START_REQ(r15, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r14, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$IEEE802154_ADD_IFACE(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r14, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x28}}, 0x0) 00:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000034dd0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000ffffffea0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000fffffff00a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000fffffffe0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000007fffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fsync(r2) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000ffffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x28}}, 0x0) 00:47:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008}, 0x40) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008}, 0x40) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r16) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r16) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r16) sendmsg$NBD_CMD_STATUS(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002cbd0000000000000000000008000100000000000c0006000300000000000000"], 0x28}, 0x1, 0x3000000000000, 0x0, 0x2400c895}, 0x0) sendmsg$IEEE802154_START_REQ(r15, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r14, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$IEEE802154_ADD_IFACE(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r14, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x28}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400020000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400030000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x80) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r8, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400040000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400050000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400060000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) [ 1365.066061][T27157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008}, 0x40) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r16) (async) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r16) sendmsg$NBD_CMD_STATUS(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002cbd0000000000000000000008000100000000000c0006000300000000000000"], 0x28}, 0x1, 0x3000000000000, 0x0, 0x2400c895}, 0x0) sendmsg$IEEE802154_START_REQ(r15, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r14, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$IEEE802154_ADD_IFACE(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r14, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400070000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008800}, 0xc0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x80, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c8d1) 00:47:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140035e630c875a67a873234200a1390", @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20024000}, 0x8000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 00:47:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400080000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1365.181316][T27205] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1365.272514][T27211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1365.306978][T27217] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 00:47:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x80) (async) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r8, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400090000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:47:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140035e630c875a67a873234200a1390", @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20024000}, 0x8000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 00:47:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008800}, 0xc0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) (rerun: 64) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x80, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c8d1) (rerun: 64) 00:47:11 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x7, 0xfe, 0x3, 0x0, 0x0, 0xd00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x24000844) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ebffffff21000000050020000000000009001f00706d793000000000f8bec18005ab77cc5d4ec791f5b605b44a3d49300a3c4384043c552db36ab1114e956fd9a81883b8beaa7db71adc182a1a823c6de3a53aecb6393d6071a08b67fda9e23eb40301cd40c3bd10f9af966cd3317f74709e30420662933ec5e63660b713042c368009197575ebd876d37ff397377050dbd733ffbf6621d8e15e61144dab7ce2614f7fcf0e3610f26cf71e4d10f5c242d7b1c3e4dfd182cd803ca4e0c63eb4da81"], 0x28}}, 0x0) 00:47:11 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x80087601, 0x0) 00:47:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140035e630c875a67a873234200a1390", @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20024000}, 0x8000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 00:47:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008800}, 0xc0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x80, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c8d1) 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000a0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x80) (async) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r8, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:11 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x7, 0xfe, 0x3, 0x0, 0x0, 0xd00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x24000844) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ebffffff21000000050020000000000009001f00706d793000000000f8bec18005ab77cc5d4ec791f5b605b44a3d49300a3c4384043c552db36ab1114e956fd9a81883b8beaa7db71adc182a1a823c6de3a53aecb6393d6071a08b67fda9e23eb40301cd40c3bd10f9af966cd3317f74709e30420662933ec5e63660b713042c368009197575ebd876d37ff397377050dbd733ffbf6621d8e15e61144dab7ce2614f7fcf0e3610f26cf71e4d10f5c242d7b1c3e4dfd182cd803ca4e0c63eb4da81"], 0x28}}, 0x0) 00:47:11 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x141003, 0x0) 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000b0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x7, 0xfe, 0x3, 0x0, 0x0, 0xd00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x24000844) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ebffffff21000000050020000000000009001f00706d793000000000f8bec18005ab77cc5d4ec791f5b605b44a3d49300a3c4384043c552db36ab1114e956fd9a81883b8beaa7db71adc182a1a823c6de3a53aecb6393d6071a08b67fda9e23eb40301cd40c3bd10f9af966cd3317f74709e30420662933ec5e63660b713042c368009197575ebd876d37ff397377050dbd733ffbf6621d8e15e61144dab7ce2614f7fcf0e3610f26cf71e4d10f5c242d7b1c3e4dfd182cd803ca4e0c63eb4da81"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x7, 0xfe, 0x3, 0x0, 0x0, 0xd00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x24000844) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ebffffff21000000050020000000000009001f00706d793000000000f8bec18005ab77cc5d4ec791f5b605b44a3d49300a3c4384043c552db36ab1114e956fd9a81883b8beaa7db71adc182a1a823c6de3a53aecb6393d6071a08b67fda9e23eb40301cd40c3bd10f9af966cd3317f74709e30420662933ec5e63660b713042c368009197575ebd876d37ff397377050dbd733ffbf6621d8e15e61144dab7ce2614f7fcf0e3610f26cf71e4d10f5c242d7b1c3e4dfd182cd803ca4e0c63eb4da81"], 0x28}}, 0x0) (async) 00:47:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000c0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1366.043848][T27276] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1366.062994][T27269] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 00:47:11 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 1366.108949][T27296] __nla_validate_parse: 65 callbacks suppressed [ 1366.108966][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000d0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:11 executing program 5: sysfs$1(0x1, &(0x7f0000000140)='+\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4a8, 0x2e8, 0x2e8, 0x1e4, 0x3c8, 0x3c8, 0x3c8, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="1d54a40caee4"}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'nr0\x00'}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}, {{@uncond, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4f4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x2, 0x0, @empty}, 0x10) syz_io_uring_complete(0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 00:47:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xaa5, 0x6, 0x5, 0x8, 0x15, "f63fb98c298aabd0a76a3b4aceee71985ff7f0"}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) [ 1366.191550][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:11 executing program 5: syz_io_uring_setup(0x54d6, &(0x7f0000000040), 0x0, 0x0) 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000e0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:11 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) [ 1366.290281][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000f0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 5: socket$l2tp(0x2, 0x2, 0x73) io_uring_setup(0x8000, &(0x7f00000010c0)={0x0, 0xa21c, 0x2, 0x1, 0x12d}) 00:47:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r3, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040014}, 0x800) 00:47:11 executing program 5: sysfs$1(0x1, &(0x7f0000000140)='+\x00') [ 1366.391625][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400100000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r3, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x41) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040014}, 0x800) [ 1366.493787][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xaa5, 0x6, 0x5, 0x8, 0x15, "f63fb98c298aabd0a76a3b4aceee71985ff7f0"}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400110000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:12 executing program 5: pipe2(&(0x7f0000000400), 0x0) 00:47:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000005002e000000000005002b000300000005002a00000000000a0001007770616e310000003dbe9dac1eb3b21191aea43cf88c8e8f3c46117e2f1ef326dd8271285d27d09676e3bf3b4fbca4b04a4dae6ee32903aa2c49aa68c0d1c3e064d5e77852984aa43c683b22249fe08e87b54ab2d1c07398592cd5552271b41a8f0e43cf98fdbf633b82fccd6a26b7bb95486fb5914025c8ffde7c73d97ac786fc2062bcb5c49f83cf7f14f1516c082a6a16898c5e5dd013999b6f3a37564ce26346069b08a2cfcc3e0367b6ce04b3334888761661133402415501fa"], 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x200, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x34}}, 0x80) 00:47:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r3, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040014}, 0x800) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040014}, 0x800) 00:47:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r15) sendmsg$NLBL_CIPSOV4_C_ADD(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r16, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r16, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a65ef08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47dd}]}]}]}, 0x34}}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r18) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r19, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:47:12 executing program 5: syz_open_dev$vcsa(&(0x7f00000008c0), 0x0, 0x0) 00:47:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000005002e000000000005002b000300000005002a00000000000a0001007770616e310000003dbe9dac1eb3b21191aea43cf88c8e8f3c46117e2f1ef326dd8271285d27d09676e3bf3b4fbca4b04a4dae6ee32903aa2c49aa68c0d1c3e064d5e77852984aa43c683b22249fe08e87b54ab2d1c07398592cd5552271b41a8f0e43cf98fdbf633b82fccd6a26b7bb95486fb5914025c8ffde7c73d97ac786fc2062bcb5c49f83cf7f14f1516c082a6a16898c5e5dd013999b6f3a37564ce26346069b08a2cfcc3e0367b6ce04b3334888761661133402415501fa"], 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x200, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x34}}, 0x80) 00:47:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400120000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1367.112249][T27350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:12 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000bc0), 0x10) 00:47:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400250000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1367.184272][T27365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1367.231730][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xaa5, 0x6, 0x5, 0x8, 0x15, "f63fb98c298aabd0a76a3b4aceee71985ff7f0"}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (rerun: 64) 00:47:13 executing program 5: pipe2(&(0x7f0000000680), 0x80000) 00:47:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400480000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:13 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r15) (async) r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r15) sendmsg$NLBL_CIPSOV4_C_ADD(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r16, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r16, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r16, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a65ef08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47dd}]}]}]}, 0x34}}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r18) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r19, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:47:13 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000580)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) syz_io_uring_setup(0x2197, &(0x7f00000012c0)={0x0, 0xd80d, 0x20}, 0x0, 0x0) 00:47:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000005002e000000000005002b000300000005002a00000000000a0001007770616e310000003dbe9dac1eb3b21191aea43cf88c8e8f3c46117e2f1ef326dd8271285d27d09676e3bf3b4fbca4b04a4dae6ee32903aa2c49aa68c0d1c3e064d5e77852984aa43c683b22249fe08e87b54ab2d1c07398592cd5552271b41a8f0e43cf98fdbf633b82fccd6a26b7bb95486fb5914025c8ffde7c73d97ac786fc2062bcb5c49f83cf7f14f1516c082a6a16898c5e5dd013999b6f3a37564ce26346069b08a2cfcc3e0367b6ce04b3334888761661133402415501fa"], 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000005002e000000000005002b000300000005002a00000000000a0001007770616e310000003dbe9dac1eb3b21191aea43cf88c8e8f3c46117e2f1ef326dd8271285d27d09676e3bf3b4fbca4b04a4dae6ee32903aa2c49aa68c0d1c3e064d5e77852984aa43c683b22249fe08e87b54ab2d1c07398592cd5552271b41a8f0e43cf98fdbf633b82fccd6a26b7bb95486fb5914025c8ffde7c73d97ac786fc2062bcb5c49f83cf7f14f1516c082a6a16898c5e5dd013999b6f3a37564ce26346069b08a2cfcc3e0367b6ce04b3334888761661133402415501fa"], 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x200, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x34}}, 0x80) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x200, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x34}}, 0x80) 00:47:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r1, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 00:47:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000f9b77068e5ce1519171a270dc61286c72bdee71f552fdcc6fbcb1c705b8b1fb6819bdf7c795478893c9d0873a3d600ef73ff6434d20c52db7a8ca3d3c0edd47515ca89d14b62be9dad8a5f34d41a6e8d542860954772ca9d9b9ad73040ffff578a2d03bd781029ec150f10a9f41e5b5729f6bf12f891275c4891b2fce1ad2a22460528df5ba970b56dbee247d0617ea0137d73508302", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) io_uring_enter(r5, 0x4a25, 0xfe7b, 0xa, &(0x7f0000000200)={[0x80000000]}, 0x8) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) fdatasync(r3) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304004c0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:13 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="c9b360e17a54", @val, {@ipv4}}, 0x0) [ 1368.010458][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:13 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:47:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400600000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:13 executing program 5: msync(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) [ 1368.089484][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1368.106906][T27400] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1368.107134][T27410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400680000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r15) sendmsg$NLBL_CIPSOV4_C_ADD(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000", @ANYRES16=r16, @ANYBLOB="01000000000000000000010000000800010000000000040108801400076908000500796f7a5c0800050000000000340007800800060000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000c000780080006000000000034ff07804b000600000000000c00078008000500000000003c00078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000600000000004c0007800800050000000000080005000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600ffff00000c00078008000500000000000800020001000000040004"], 0x134}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r16, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a65ef08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47dd}]}]}]}, 0x34}}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r18) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r19, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:47:13 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:47:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:13 executing program 5: syz_io_uring_setup(0x2197, 0x0, 0x0, 0x0) [ 1368.303651][T27446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000f9b77068e5ce1519171a270dc61286c72bdee71f552fdcc6fbcb1c705b8b1fb6819bdf7c795478893c9d0873a3d600ef73ff6434d20c52db7a8ca3d3c0edd47515ca89d14b62be9dad8a5f34d41a6e8d542860954772ca9d9b9ad73040ffff578a2d03bd781029ec150f10a9f41e5b5729f6bf12f891275c4891b2fce1ad2a22460528df5ba970b56dbee247d0617ea0137d73508302", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) io_uring_enter(r5, 0x4a25, 0xfe7b, 0xa, &(0x7f0000000200)={[0x80000000]}, 0x8) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fdatasync(r3) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304006c0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) 00:47:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400740000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:14 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) 00:47:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000f9b77068e5ce1519171a270dc61286c72bdee71f552fdcc6fbcb1c705b8b1fb6819bdf7c795478893c9d0873a3d600ef73ff6434d20c52db7a8ca3d3c0edd47515ca89d14b62be9dad8a5f34d41a6e8d542860954772ca9d9b9ad73040ffff578a2d03bd781029ec150f10a9f41e5b5729f6bf12f891275c4891b2fce1ad2a22460528df5ba970b56dbee247d0617ea0137d73508302", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) io_uring_enter(r5, 0x4a25, 0xfe7b, 0xa, &(0x7f0000000200)={[0x80000000]}, 0x8) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async, rerun: 32) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (rerun: 32) fdatasync(r3) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:14 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4a8, 0x2e8, 0x2e8, 0x1e4, 0x3c8, 0x3c8, 0x3c8, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="1d54a40caee4"}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'nr0\x00'}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}, {{@uncond, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4f4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x2, 0x0, @empty}, 0x10) syz_io_uring_complete(0x0) 00:47:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x108, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000014}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a0e3e04610000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x18) 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304007a0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:14 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$rfkill(r0, 0x0, 0x0) 00:47:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000300000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1369.026779][ T27] audit: type=1400 audit(1700009234.440:757): avc: denied { create } for pid=27497 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 00:47:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '$):*&/$%\x1a--\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800218e10bf13d49e0ffa8d409e2e442e3c457941ae4a2fd665ed6371960a59496eaf16fb28ef7835e07d6fb01d177c6075a5870cd5d31bf9a67e928b705cad7e9acb6792f2573e5d50a2ed146c481176a14a22ccf3358a22df7820ffe079c0fdafc2a298b9f2dea04e1af738de4998bf4d3f74b0c28c4f96544d27b9a0dacda1f72064d4b74a6778798fcfd3aaa94a", @ANYRES16=r7, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x20000000) 00:47:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x108, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000014}, 0x8010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a0e3e04610000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x18) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x18) 00:47:14 executing program 5: syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x40000) [ 1369.105525][ T27] audit: type=1400 audit(1700009234.480:758): avc: denied { write } for pid=27497 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000500000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:14 executing program 5: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 00:47:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x108, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000014}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a0e3e04610000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x18) socket$netlink(0x10, 0x3, 0x8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x108, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000014}, 0x8010) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a0e3e04610000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r4) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x18) (async) 00:47:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '$):*&/$%\x1a--\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800218e10bf13d49e0ffa8d409e2e442e3c457941ae4a2fd665ed6371960a59496eaf16fb28ef7835e07d6fb01d177c6075a5870cd5d31bf9a67e928b705cad7e9acb6792f2573e5d50a2ed146c481176a14a22ccf3358a22df7820ffe079c0fdafc2a298b9f2dea04e1af738de4998bf4d3f74b0c28c4f96544d27b9a0dacda1f72064d4b74a6778798fcfd3aaa94a", @ANYRES16=r7, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '$):*&/$%\x1a--\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800218e10bf13d49e0ffa8d409e2e442e3c457941ae4a2fd665ed6371960a59496eaf16fb28ef7835e07d6fb01d177c6075a5870cd5d31bf9a67e928b705cad7e9acb6792f2573e5d50a2ed146c481176a14a22ccf3358a22df7820ffe079c0fdafc2a298b9f2dea04e1af738de4998bf4d3f74b0c28c4f96544d27b9a0dacda1f72064d4b74a6778798fcfd3aaa94a", @ANYRES16=r7, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x20000000) (async) 00:47:14 executing program 5: shmat(0x0, &(0x7f0000235000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 00:47:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001340)={0x0, "82fc6c124222f72271411d9e13b1b49b"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r6, 0x7, 0x7fffffff, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) syz_io_uring_setup(0x33ae, &(0x7f0000000300)={0x0, 0x4a77, 0x40, 0x2, 0x2a6, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x94340, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) [ 1369.180886][T27516] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:14 executing program 5: pipe2(&(0x7f0000000680), 0x0) 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000600000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x38}}, 0x0) 00:47:14 executing program 5: pipe2(&(0x7f0000000400), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 00:47:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000000000001000000000000000000"], 0x34}}, 0x0) 00:47:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x38}}, 0x0) 00:47:14 executing program 5: syz_io_uring_setup(0x54d6, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f00000000c0), &(0x7f0000000100)) 00:47:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000700000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '$):*&/$%\x1a--\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800218e10bf13d49e0ffa8d409e2e442e3c457941ae4a2fd665ed6371960a59496eaf16fb28ef7835e07d6fb01d177c6075a5870cd5d31bf9a67e928b705cad7e9acb6792f2573e5d50a2ed146c481176a14a22ccf3358a22df7820ffe079c0fdafc2a298b9f2dea04e1af738de4998bf4d3f74b0c28c4f96544d27b9a0dacda1f72064d4b74a6778798fcfd3aaa94a", @ANYRES16=r7, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x20000000) 00:47:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000000000001000000000000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000000000001000000000000000000"], 0x34}}, 0x0) (async) [ 1369.368788][T27541] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000900000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001340)={0x0, "82fc6c124222f72271411d9e13b1b49b"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r6, 0x7, 0x7fffffff, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) syz_io_uring_setup(0x33ae, &(0x7f0000000300)={0x0, 0x4a77, 0x40, 0x2, 0x2a6, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x94340, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001340)={0x0, "82fc6c124222f72271411d9e13b1b49b"}) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r6, 0x7, 0x7fffffff, 0x1}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async) syz_io_uring_setup(0x33ae, &(0x7f0000000300)={0x0, 0x4a77, 0x40, 0x2, 0x2a6, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000140)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x94340, 0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r8, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r7, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000058) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0xe00, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x38}}, 0x0) 00:47:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000000000001000000000000000000"], 0x34}}, 0x0) 00:47:15 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000d40)={0x2, 0x0, @private=0xa010102}, 0x10) 00:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000a00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:15 executing program 5: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe000, 0x6, &(0x7f0000ff2000/0xe000)=nil) 00:47:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x0) 00:47:15 executing program 5: pipe2(&(0x7f0000000400), 0x84880) 00:47:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000b00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1370.120671][T27596] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async, rerun: 32) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001340)={0x0, "82fc6c124222f72271411d9e13b1b49b"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r6, 0x7, 0x7fffffff, 0x1}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) syz_io_uring_setup(0x33ae, &(0x7f0000000300)={0x0, 0x4a77, 0x40, 0x2, 0x2a6, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x94340, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r7, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000058) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0xe00, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) (async) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r7, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000058) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) (async) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0xe00, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) 00:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000c00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xb8, 0x60, 0xd0e0000, 0xb8, 0x100, 0x194, 0x1d8, 0x1d8, 0x194, 0x1d8, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'veth0_virt_wifi\x00'}, 0xee02, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vlan1\x00'}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'wlan0\x00', 'bridge0\x00'}, 0x9400, 0xb8, 0xdc, 0x94, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@private1}}]}, @common=@unspec=@CONNSECMARK={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x284) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000e000000050020000000009ace5ded6e270a2038740009001f00706a7930000000006215de973c9d522b91f0b04a14c53ae48ea44bb57d6384bab7fa724cd510cc42a0d2c05b1f237bb0c2bf2c115dd00ccc6923031b22b9f5e30e02f9b136aedeee0ed3bfdd3408c54398b8e54a9c716e14ca5b8eaa0551ec756b75546c6b6aecacba505a79874c6d0397626b02d353ccb3f9f046ecc60b11ad2fdcfc1395e151cb153acfbe8bae46f50353e2b8a81fb070a7c085a47bd9c28aeeb410ef838d82306e3cb3d433f87561ddd72386f5daccb35f245a0a0b2a725b6cc48cd34aed51b0315f86a81114ed25f40000000000"], 0x34}}, 0x0) 00:47:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x0) 00:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000d00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:15 executing program 5: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000140)='+\x00') ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4a8, 0x2e8, 0x2e8, 0x1e4, 0x3c8, 0x3c8, 0x3c8, 0x4, &(0x7f00000006c0), {[{{@arp={@rand_addr=0x64010101, @empty, 0x0, 0x0, 0x0, 0x6, {@mac=@random="1d54a40caee4", {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x378, 0x0, 0x0, 'bond_slave_0\x00', 'nr0\x00'}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0xffff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}, {{@uncond, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xbe}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4f4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x2, 0x0, @empty}, 0x10) syz_io_uring_complete(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f8, 0x0, 0x70bd29, 0x0, "", ["", "", ""]}, 0x10}}, 0x1080) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000001240)) syz_io_uring_setup(0x2197, &(0x7f00000012c0)={0x0, 0xd80d, 0x20, 0x1}, &(0x7f0000001340), &(0x7f0000001380)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106ab000063996b960fbba6b0008f3b94c72a52c7c500000c000500f84affffffff1800000000000000050020000000"], 0x34}}, 0x0) 00:47:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106ab000063996b960fbba6b0008f3b94c72a52c7c500000c000500f84affffffff1800000000000000050020000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106ab000063996b960fbba6b0008f3b94c72a52c7c500000c000500f84affffffff1800000000000000050020000000"], 0x34}}, 0x0) (async) [ 1370.408337][T27629] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1370.473160][ T27] audit: type=1400 audit(1700009235.890:759): avc: denied { nlmsg_read } for pid=27646 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 00:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000e00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:15 executing program 5: pipe2(&(0x7f0000000000), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000400), 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) 00:47:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106ab000063996b960fbba6b0008f3b94c72a52c7c500000c000500f84affffffff1800000000000000050020000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106ab000063996b960fbba6b0008f3b94c72a52c7c500000c000500f84affffffff1800000000000000050020000000"], 0x34}}, 0x0) (async) 00:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r7, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000058) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0xe00, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) 00:47:16 executing program 5: sysfs$1(0x1, &(0x7f0000000140)='+\x00') ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x2434) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000280)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast1, @local}, 0xc) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4a8, 0x2e8, 0x2e8, 0x1e4, 0x3c8, 0x3c8, 0x3c8, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="1d54a40caee4", {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'nr0\x00', {}, {}, 0x0, 0x64}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}, {{@uncond, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x8}}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4f4) sendto$inet(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x20000000, &(0x7f0000000cc0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f8, 0x300}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 00:47:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000f00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000c830e72cb6995e6ffd0ee9b50e1a5a7ad7062d1ecde63f8d76c2cb741712b4d587255827d8452e7ebbdd842b2af9245e7c2d4f1d9daa194ac198c52086f9faf089e85739eb88f0ff64cd91ba8fe81422af8287128e0bf029a3b577db1cde722dd2f0945e0e7ec509f4a44fc0d28ac7fa331ee3748f735df929eb663b65f0c836094556a4003678c993a5283a2823552976856e3e0e6c6078fb3e493ede8456a99e8c4d3daf70ea2e9b07714c380006d7f2700b221212679b922dd1a57056b0b18b856ea15b88bf2e7098642496a757267bc6c54efe4f8466f55d2af55621801a5ec3d6ebef59bc", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x80]}, 0x8, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0xa0}}, 0x0) 00:47:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400001100000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:16 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) 00:47:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000c830e72cb6995e6ffd0ee9b50e1a5a7ad7062d1ecde63f8d76c2cb741712b4d587255827d8452e7ebbdd842b2af9245e7c2d4f1d9daa194ac198c52086f9faf089e85739eb88f0ff64cd91ba8fe81422af8287128e0bf029a3b577db1cde722dd2f0945e0e7ec509f4a44fc0d28ac7fa331ee3748f735df929eb663b65f0c836094556a4003678c993a5283a2823552976856e3e0e6c6078fb3e493ede8456a99e8c4d3daf70ea2e9b07714c380006d7f2700b221212679b922dd1a57056b0b18b856ea15b88bf2e7098642496a757267bc6c54efe4f8466f55d2af55621801a5ec3d6ebef59bc", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x80]}, 0x8, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0xa0}}, 0x0) [ 1370.616290][T27680] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400001200000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:16 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) 00:47:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000c830e72cb6995e6ffd0ee9b50e1a5a7ad7062d1ecde63f8d76c2cb741712b4d587255827d8452e7ebbdd842b2af9245e7c2d4f1d9daa194ac198c52086f9faf089e85739eb88f0ff64cd91ba8fe81422af8287128e0bf029a3b577db1cde722dd2f0945e0e7ec509f4a44fc0d28ac7fa331ee3748f735df929eb663b65f0c836094556a4003678c993a5283a2823552976856e3e0e6c6078fb3e493ede8456a99e8c4d3daf70ea2e9b07714c380006d7f2700b221212679b922dd1a57056b0b18b856ea15b88bf2e7098642496a757267bc6c54efe4f8466f55d2af55621801a5ec3d6ebef59bc", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x80]}, 0x8, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0xa0}}, 0x0) 00:47:16 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:16 executing program 5: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 00:47:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400002500000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:16 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10}, 0x10}}, 0x0) 00:47:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400dd3400000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:16 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) [ 1371.487218][T27716] __nla_validate_parse: 25 callbacks suppressed [ 1371.487235][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1371.522765][T27711] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:17 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x80, 0x0, [{@local}, {@multicast2}, {@empty}, {@initdev}, {@broadcast}, {@local}, {@remote}, {@broadcast}]}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='host1x_cdma_push_wide\x00', r5}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400413600000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) [ 1371.594633][T27727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1371.595658][T27711] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:17 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x80, 0x0, [{@local}, {@multicast2}, {@empty}, {@initdev}, {@broadcast}, {@local}, {@remote}, {@broadcast}]}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) (rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='host1x_cdma_push_wide\x00', r5}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) 00:47:17 executing program 5: pipe2(&(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) pipe2(&(0x7f0000000400), 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) [ 1371.641720][T27737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:17 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) (async) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400364100000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:17 executing program 5: pipe2(0x0, 0x400) 00:47:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9b0828a9", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000140006006c6f000000000000000000000000000014000300fe80000000000000000000000000000008000400e000000214000200ff020000000000000000000000000001"], 0x58}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}}, 0x4004801) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:17 executing program 5: pipe2(&(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000400), 0x880) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) 00:47:17 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x80, 0x0, [{@local}, {@multicast2}, {@empty}, {@initdev}, {@broadcast}, {@local}, {@remote}, {@broadcast}]}}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='host1x_cdma_push_wide\x00', r5}, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) 00:47:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9b0828a9", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000140006006c6f000000000000000000000000000014000300fe80000000000000000000000000000008000400e000000214000200ff020000000000000000000000000001"], 0x58}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}}, 0x4004801) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 1371.720235][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400884700000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9b0828a9", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000140006006c6f000000000000000000000000000014000300fe80000000000000000000000000000008000400e000000214000200ff020000000000000000000000000001"], 0x58}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}}, 0x4004801) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:17 executing program 5: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x5}, 0x48) 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1371.771818][T27754] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1371.811211][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:17 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=@framed, 0x0}, 0x90) 00:47:17 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) (async, rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (rerun: 32) 00:47:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 1371.862303][T27754] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1371.875222][T27780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 00:47:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}}, 0x0) 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400884800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:17 executing program 5: syz_io_uring_setup(0x54d6, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) 00:47:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}}, 0x0) 00:47:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x215, 0x0, 0x0, 0x10, 0x0, {0x2, r9}}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = accept$unix(r2, &(0x7f0000000300), &(0x7f0000000140)=0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r10, {0xffff}}, './file0\x00'}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8, 0x1}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 1371.948324][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004c00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:17 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:47:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}}, 0x0) (async) 00:47:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x34004810}, 0x1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:17 executing program 5: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:47:17 executing program 5: munmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000) 00:47:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 00:47:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400655800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x34004810}, 0x1) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 1372.069787][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (rerun: 64) [ 1372.167190][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x34004810}, 0x1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000001240)) 00:47:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000011) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00(\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c010000292b34c7bdfde4c1ba3b6035a9f8bbeb34607c6bf39ca5d7039e244ab029d200df961c1b17e875b0b6a0b8bbbe40329d08f9c45ed7ebeb65b590cec98fd0ca599940c2f7a1", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf25210000000c000600030000000000000024002b8005000400010000000500010003000000050004000000000008000300070000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4884}, 0x48) 00:47:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 00:47:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x215, 0x0, 0x0, 0x10, 0x0, {0x2, r9}}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = accept$unix(r2, &(0x7f0000000300), &(0x7f0000000140)=0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r10, {0xffff}}, './file0\x00'}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:18 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="43ed84790000000001"], 0x10}, 0x0) 00:47:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4) 00:47:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400586500000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:18 executing program 5: openat$pidfd(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x4200) [ 1372.880058][T27847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1372.917767][T27845] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:18 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000011) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000011) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00(\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c010000292b34c7bdfde4c1ba3b6035a9f8bbeb34607c6bf39ca5d7039e244ab029d200df961c1b17e875b0b6a0b8bbbe40329d08f9c45ed7ebeb65b590cec98fd0ca599940c2f7a1", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf25210000000c000600030000000000000024002b8005000400010000000500010003000000050004000000000008000300070000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4884}, 0x48) 00:47:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4) 00:47:18 executing program 5: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast1, @local}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 00:47:18 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000ac0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"e4ec3d7dba843d002a8e066acc932076"}}}}, 0xa0) 00:47:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006c00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:18 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000012c0), 0x0, 0x0) [ 1373.022538][T27871] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x215, 0x0, 0x0, 0x10, 0x0, {0x2, r9}}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = accept$unix(r2, &(0x7f0000000300), &(0x7f0000000140)=0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r10, {0xffff}}, './file0\x00'}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:19 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4) (async) 00:47:19 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x2, 0x0, @empty}, 0x10) 00:47:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400007400000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000011) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00(\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000021000000050020000000000009001f007068793000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c010000292b34c7bdfde4c1ba3b6035a9f8bbeb34607c6bf39ca5d7039e244ab029d200df961c1b17e875b0b6a0b8bbbe40329d08f9c45ed7ebeb65b590cec98fd0ca599940c2f7a1", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf25210000000c000600030000000000000024002b8005000400010000000500010003000000050004000000000008000300070000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4884}, 0x48) 00:47:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x89}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r8, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r12, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r15) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r16, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x324, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [{0x4}]}]}, @NFC_ATTR_LLC_SDP={0x60, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0xb, 0x1, '%-{[*\xb8/'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x6, 0x1, '!&'}, {0xa, 0x1, 'wpan0\x00'}, {0x7, 0x1, '/**'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'wpan1\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_LLC_SDP={0x29c, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '#&'}, {0xd, 0x1, 'nl802154\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x7, 0x1, '(/)'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x8, 0x1, '$[9!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x64, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, '^\'}.-%'}, {0x6, 0x1, '\x8d\\'}, {0x4}, {0x8, 0x1, '\'^{\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '@'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0xc, 0x1, '#\x17).\'-^#'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x68, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, ':(\xc1#%#'}, {0xd, 0x1, 'nl802154\x00'}, {0x9, 0x1, '+\\\\{!'}, {0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0x5, 0x1, '&'}, {0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, '-&X&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, ',-'}]}, {0x60, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, '\xbb'}, {0xb, 0x1, '%\xf6&#[$\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, '-@(*'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '-\xca+/^'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000c000500000000000000000005002000000000000a0001007770616e33000000"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44020}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:19 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x1) 00:47:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400007a00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400008100000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="734e00003ef33b"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '%'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ',@\xa3#}'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48088}, 0x90) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:19 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7ff) 00:47:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400478800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400488800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x89}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r8, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r12, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async, rerun: 64) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r15) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r16, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x324, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [{0x4}]}]}, @NFC_ATTR_LLC_SDP={0x60, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0xb, 0x1, '%-{[*\xb8/'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x6, 0x1, '!&'}, {0xa, 0x1, 'wpan0\x00'}, {0x7, 0x1, '/**'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'wpan1\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_LLC_SDP={0x29c, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '#&'}, {0xd, 0x1, 'nl802154\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x7, 0x1, '(/)'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x8, 0x1, '$[9!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x64, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, '^\'}.-%'}, {0x6, 0x1, '\x8d\\'}, {0x4}, {0x8, 0x1, '\'^{\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '@'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0xc, 0x1, '#\x17).\'-^#'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x68, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, ':(\xc1#%#'}, {0xd, 0x1, 'nl802154\x00'}, {0x9, 0x1, '+\\\\{!'}, {0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0x5, 0x1, '&'}, {0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, '-&X&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, ',-'}]}, {0x60, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, '\xbb'}, {0xb, 0x1, '%\xf6&#[$\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, '-@(*'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '-\xca+/^'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc) (async, rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000c000500000000000000000005002000000000000a0001007770616e33000000"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44020}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="734e00003ef33b"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '%'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ',@\xa3#}'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48088}, 0x90) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040034dd00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe94}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004010) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x39, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r12, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x24040000) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004003000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1374.645308][T27936] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000340000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000010000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000020000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000030000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000040000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x89}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r8, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r12, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r15) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r16, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x324, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [{0x4}]}]}, @NFC_ATTR_LLC_SDP={0x60, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0xb, 0x1, '%-{[*\xb8/'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x6, 0x1, '!&'}, {0xa, 0x1, 'wpan0\x00'}, {0x7, 0x1, '/**'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'wpan1\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_LLC_SDP={0x29c, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '#&'}, {0xd, 0x1, 'nl802154\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x7, 0x1, '(/)'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x8, 0x1, '$[9!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x64, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, '^\'}.-%'}, {0x6, 0x1, '\x8d\\'}, {0x4}, {0x8, 0x1, '\'^{\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '@'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0xc, 0x1, '#\x17).\'-^#'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x68, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, ':(\xc1#%#'}, {0xd, 0x1, 'nl802154\x00'}, {0x9, 0x1, '+\\\\{!'}, {0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0x5, 0x1, '&'}, {0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, '-&X&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, ',-'}]}, {0x60, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, '\xbb'}, {0xb, 0x1, '%\xf6&#[$\\'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, '-@(*'}, {0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '-\xca+/^'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000c000500000000000000000005002000000000000a0001007770616e33000000"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44020}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000050000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="734e00003ef33b"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="734e00003ef33b"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '%'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ',@\xa3#}'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48088}, 0x90) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe94}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004010) (async, rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x39, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r12, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x24040000) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000060000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000070000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000080000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000090000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000a0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1374.799954][T27949] workqueue: Failed to create a rescuer kthread for wq "nfc26_nci_tx_wq": -EINTR [ 1375.717012][T28069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe94}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004010) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x39, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r12, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x24040000) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000b0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}}, 0x0) 00:47:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r10, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r12) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r12) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r13, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4391140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1000}, 0x10) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000c0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}}, 0x0) [ 1376.397788][T28113] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1376.436216][T28113] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000d0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x460442, 0x0) getpeername$llc(r2, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/83, 0x53, 0x1, &(0x7f0000000100)=""/22, 0x16}, &(0x7f0000000180)=0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}}, 0x0) (async) 00:47:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r10, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r12) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r12) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r13, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4391140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1000}, 0x10) (async) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) [ 1376.460860][T28113] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440480d0}, 0x4001) [ 1376.542768][T28145] __nla_validate_parse: 23 callbacks suppressed [ 1376.542851][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1376.563786][T28141] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1376.613611][T28141] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1376.654898][T28141] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000e0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x5e3280, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x7667, &(0x7f0000000780)={0x0, 0x2, 0x4, 0x4}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) r10 = openat$incfs(r8, &(0x7f0000000700)='.log\x00', 0x60080, 0x180) read$rfkill(r10, &(0x7f0000000740), 0x8) r11 = syz_io_uring_setup(0x404499, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x94}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x14, 0x0, r2, &(0x7f0000000840)={0x80000010}, r10, 0x3, 0x0, 0x1, {0x0, r14}}) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in6={0xa, 0x4e21, 0x1, @private1, 0x4}, 0x0, 0x0, 0x1, {0x0, r14}}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r15, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$KDGKBSENT(r16, 0x4b48, &(0x7f0000000480)={0x2, "7423757b740fc5345e84b731f882410e3780eef807361a8191c87b42989d473aee6695d5fdba8ad94c76f63744aed06f48673b46838dde51bac747e2a49813034cb5c677b56a97abf45af836aefa9e572611de95a1d08810aaef0a3c1db6bf9390b0d8ecaf3212ed58edd4b53e1eec427d4ffc9b92e6af1651c1b8d9cd08c630ca5d1f6a2ead7ff88ad589796a79756b44945bd1a2f380f85b5c526b879938c7739cd4988163888377b8a4fa1ec8535bef72f7f32226da8b5f8c5a0de9a79626b491111e3b2872758431bdbe3772d79744a17e3a984f7b28c9a2f5f502b4cab33c0f2b6db64fff67575f3888aefa450d4e8d97bb6984247342700f8506e37189f718f0c36bc0b663b0b55eb35504cc6d9958a2fba984fd49d59cebf914809fdf7f8fa8cd2e2f51b9da6d1a1522fedf768fc655f78cb876517977a774c518c4fde2d9d02b188dc5eafca3c587d59e26e2eb5c3f6ed8676030f5aaf8a6402bdee2dcf9ae57287c55cad59721d1bb6d1ccccc1c410631c8d3213f0280251bcdc05f0066efadaa44943156e61cc6d995d9af8e15390f3b9eb5de07102f6af37053b03239ebed2dd8758929e2d364921370459423ded4fa4502319fc975815502dc8119644f78d43d1a4003cd71ff192ba19358cdb78f465734948883ad72d0bb04c11e84118f6b1eb2d0986a4558166b83876a0aad4da629371527588d828696b951"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x22b1, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) syz_io_uring_submit(r6, r18, &(0x7f00000006c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) openat$cgroup_ro(r2, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) 00:47:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r10, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r12) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r12) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r13, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4391140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1000}, 0x10) (async) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 00:47:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (rerun: 64) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x460442, 0x0) getpeername$llc(r2, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/83, 0x53, 0x1, &(0x7f0000000100)=""/22, 0x16}, &(0x7f0000000180)=0x40) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440480d0}, 0x4001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440480d0}, 0x4001) (async) 00:47:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000f0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440480d0}, 0x4001) (rerun: 32) [ 1377.234908][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0}) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x460442, 0x0) getpeername$llc(r2, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/83, 0x53, 0x1, &(0x7f0000000100)=""/22, 0x16}, &(0x7f0000000180)=0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000100000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0xc8d3) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [{0xb, 0x1, '@-@]\'\'['}, {0x8, 0x1, '^):#'}, {0x9, 0x1, 'phy0\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, ')z}/$-'}]}, {0x14, 0x0, 0x0, 0x1, [{0xf, 0x1, '/\\#\\{(,(+,\''}]}]}, @NFC_ATTR_LLC_SDP={0x6c, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x7, 0x1, ':[^'}, {0x4}]}, {0x58, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x9, 0x1, '-&+(:'}, {0x6, 0x1, '$.'}, {0x7, 0x1, '\xee~%'}, {0x8, 0x1, '){*X'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8040) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c0005001200000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) [ 1377.324369][T28183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1377.338737][T28164] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d0fc7984de3892e31ca55e11256f6333493", @ANYRES16=r2, @ANYRESHEX=r0], 0x34}}, 0x0) [ 1377.403537][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000110000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) (rerun: 32) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0xc8d3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (rerun: 64) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [{0xb, 0x1, '@-@]\'\'['}, {0x8, 0x1, '^):#'}, {0x9, 0x1, 'phy0\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, ')z}/$-'}]}, {0x14, 0x0, 0x0, 0x1, [{0xf, 0x1, '/\\#\\{(,(+,\''}]}]}, @NFC_ATTR_LLC_SDP={0x6c, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x7, 0x1, ':[^'}, {0x4}]}, {0x58, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x9, 0x1, '-&+(:'}, {0x6, 0x1, '$.'}, {0x7, 0x1, '\xee~%'}, {0x8, 0x1, '){*X'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8040) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c0005001200000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d0fc7984de3892e31ca55e11256f6333493", @ANYRES16=r2, @ANYRESHEX=r0], 0x34}}, 0x0) 00:47:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x5e3280, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x7667, &(0x7f0000000780)={0x0, 0x2, 0x4, 0x4}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) openat$incfs(r8, &(0x7f0000000700)='.log\x00', 0x60080, 0x180) (async) r10 = openat$incfs(r8, &(0x7f0000000700)='.log\x00', 0x60080, 0x180) read$rfkill(r10, &(0x7f0000000740), 0x8) (async) read$rfkill(r10, &(0x7f0000000740), 0x8) r11 = syz_io_uring_setup(0x404499, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x94}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x14, 0x0, r2, &(0x7f0000000840)={0x80000010}, r10, 0x3, 0x0, 0x1, {0x0, r14}}) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in6={0xa, 0x4e21, 0x1, @private1, 0x4}, 0x0, 0x0, 0x1, {0x0, r14}}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r15, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$KDGKBSENT(r16, 0x4b48, &(0x7f0000000480)={0x2, "7423757b740fc5345e84b731f882410e3780eef807361a8191c87b42989d473aee6695d5fdba8ad94c76f63744aed06f48673b46838dde51bac747e2a49813034cb5c677b56a97abf45af836aefa9e572611de95a1d08810aaef0a3c1db6bf9390b0d8ecaf3212ed58edd4b53e1eec427d4ffc9b92e6af1651c1b8d9cd08c630ca5d1f6a2ead7ff88ad589796a79756b44945bd1a2f380f85b5c526b879938c7739cd4988163888377b8a4fa1ec8535bef72f7f32226da8b5f8c5a0de9a79626b491111e3b2872758431bdbe3772d79744a17e3a984f7b28c9a2f5f502b4cab33c0f2b6db64fff67575f3888aefa450d4e8d97bb6984247342700f8506e37189f718f0c36bc0b663b0b55eb35504cc6d9958a2fba984fd49d59cebf914809fdf7f8fa8cd2e2f51b9da6d1a1522fedf768fc655f78cb876517977a774c518c4fde2d9d02b188dc5eafca3c587d59e26e2eb5c3f6ed8676030f5aaf8a6402bdee2dcf9ae57287c55cad59721d1bb6d1ccccc1c410631c8d3213f0280251bcdc05f0066efadaa44943156e61cc6d995d9af8e15390f3b9eb5de07102f6af37053b03239ebed2dd8758929e2d364921370459423ded4fa4502319fc975815502dc8119644f78d43d1a4003cd71ff192ba19358cdb78f465734948883ad72d0bb04c11e84118f6b1eb2d0986a4558166b83876a0aad4da629371527588d828696b951"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x22b1, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) syz_io_uring_submit(r6, r18, &(0x7f00000006c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) openat$cgroup_ro(r2, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) 00:47:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x2, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r4, 0x300, 0x0, 0x0, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:47:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d0fc7984de3892e31ca55e11256f6333493", @ANYRES16=r2, @ANYRESHEX=r0], 0x34}}, 0x0) [ 1378.104591][T28212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000120000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000250000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1378.146557][T28213] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1378.173359][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000036410000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x5e3280, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x7667, &(0x7f0000000780)={0x0, 0x2, 0x4, 0x4}, &(0x7f0000000800), &(0x7f0000000040)) (async) syz_io_uring_setup(0x7667, &(0x7f0000000780)={0x0, 0x2, 0x4, 0x4}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) (async) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) r10 = openat$incfs(r8, &(0x7f0000000700)='.log\x00', 0x60080, 0x180) read$rfkill(r10, &(0x7f0000000740), 0x8) (async) read$rfkill(r10, &(0x7f0000000740), 0x8) r11 = syz_io_uring_setup(0x404499, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x94}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) (async) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x14, 0x0, r2, &(0x7f0000000840)={0x80000010}, r10, 0x3, 0x0, 0x1, {0x0, r14}}) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in6={0xa, 0x4e21, 0x1, @private1, 0x4}, 0x0, 0x0, 0x1, {0x0, r14}}) (async) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in6={0xa, 0x4e21, 0x1, @private1, 0x4}, 0x0, 0x0, 0x1, {0x0, r14}}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r15, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$KDGKBSENT(r16, 0x4b48, &(0x7f0000000480)={0x2, "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"}) (async) ioctl$KDGKBSENT(r16, 0x4b48, &(0x7f0000000480)={0x2, "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"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x22b1, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) (async) syz_io_uring_submit(r17, r18, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) syz_io_uring_submit(r6, r18, &(0x7f00000006c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) openat$cgroup_ro(r2, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) 00:47:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000480000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1378.225263][T28232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1378.252485][T28236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000004c0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1378.278425][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1378.301354][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000600000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000200)) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x407a, &(0x7f0000000300)={0x0, 0x1998, 0x40, 0x0, 0x8c, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) io_uring_enter(r5, 0x1849, 0xfd3f, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0xc8d3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [{0xb, 0x1, '@-@]\'\'['}, {0x8, 0x1, '^):#'}, {0x9, 0x1, 'phy0\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, ')z}/$-'}]}, {0x14, 0x0, 0x0, 0x1, [{0xf, 0x1, '/\\#\\{(,(+,\''}]}]}, @NFC_ATTR_LLC_SDP={0x6c, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x7, 0x1, ':[^'}, {0x4}]}, {0x58, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x9, 0x1, '-&+(:'}, {0x6, 0x1, '$.'}, {0x7, 0x1, '\xee~%'}, {0x8, 0x1, '){*X'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8040) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c0005001200000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}}, 0x4000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x2, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r4, 0x300, 0x0, 0x0, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:47:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000058650000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000680000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000006c0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000740000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000007a0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000810000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000200)) (async, rerun: 32) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async, rerun: 32) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) syz_io_uring_setup(0x407a, &(0x7f0000000300)={0x0, 0x1998, 0x40, 0x0, 0x8c, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async, rerun: 32) io_uring_enter(r5, 0x1849, 0xfd3f, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}}, 0x4000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x2, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) (async, rerun: 64) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r4, 0x300, 0x0, 0x0, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:47:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (async) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:47:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) (async) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:47:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000047880000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24010}, 0xc1) 00:47:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (rerun: 32) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24010}, 0xc1) 00:47:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000048880000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async, rerun: 64) r1 = syz_open_pts(r0, 0x0) (rerun: 64) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000200)) (async, rerun: 32) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async, rerun: 32) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x407a, &(0x7f0000000300)={0x0, 0x1998, 0x40, 0x0, 0x8c, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (rerun: 32) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) io_uring_enter(r5, 0x1849, 0xfd3f, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1379.969469][T28313] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1380.115349][T28313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24010}, 0xc1) 00:47:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) 00:47:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400ffffa8880000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x8000, 0xfffffffe, 0x7, 0xe369, 0x8, "ad2dd3b70af895917987d6b24813302c221411", 0x4}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:26 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000000) (async) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000034dd0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x2000, 0x8bbc, 0x1, 0x0, 0x6, "6cec2374a4a41ec03103df9e46cf91144e9b03"}) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x231}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) io_uring_enter(r7, 0x9a2, 0x9f8, 0x10, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x7e, 0x4000, @fd_index=0x8, 0x8, 0x0, 0x0, 0xe, 0x1, {0x2}}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400ffffffea0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400fffffff00000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400fffffffe0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040088a8ffff0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304007fffffff0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8316a49f00494c154d434566d3bba161e2331a7a87b14e1a92a43b24e3b5af6954ebf1efe3d6830541236fb9e7ff01d51f014f92a62965fa42adcff46857f6fcce4e6f89204c9b931e27e906aedd9eb8612bf34d9fb16de7fe635b46f6b60f8e3e73ab7b6a900"/115, @ANYRES16=r2, @ANYBLOB="01000300000000000000357b255355423a7c07000000320000210000000c000500098413000000003d3b0d32eae1162193000000000a00e8007770616e3300000009001f007068793000"], 0x38}}, 0x0) 00:47:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) 00:47:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (rerun: 64) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x8000, 0xfffffffe, 0x7, 0xe369, 0x8, "ad2dd3b70af895917987d6b24813302c221411", 0x4}) (async, rerun: 64) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 64) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8316a49f00494c154d434566d3bba161e2331a7a87b14e1a92a43b24e3b5af6954ebf1efe3d6830541236fb9e7ff01d51f014f92a62965fa42adcff46857f6fcce4e6f89204c9b931e27e906aedd9eb8612bf34d9fb16de7fe635b46f6b60f8e3e73ab7b6a900"/115, @ANYRES16=r2, @ANYBLOB="01000300000000000000357b255355423a7c07000000320000210000000c000500098413000000003d3b0d32eae1162193000000000a00e8007770616e3300000009001f007068793000"], 0x38}}, 0x0) 00:47:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130800000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400eaffffff0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x8000, 0xfffffffe, 0x7, 0xe369, 0x8, "ad2dd3b70af895917987d6b24813302c221411", 0x4}) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1381.621876][T28395] __nla_validate_parse: 15 callbacks suppressed [ 1381.621890][T28395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8316a49f00494c154d434566d3bba161e2331a7a87b14e1a92a43b24e3b5af6954ebf1efe3d6830541236fb9e7ff01d51f014f92a62965fa42adcff46857f6fcce4e6f89204c9b931e27e906aedd9eb8612bf34d9fb16de7fe635b46f6b60f8e3e73ab7b6a900"/115, @ANYRES16=r2, @ANYBLOB="01000300000000000000357b255355423a7c07000000320000210000000c000500098413000000003d3b0d32eae1162193000000000a00e8007770616e3300000009001f007068793000"], 0x38}}, 0x0) 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400f0ffffff0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1381.686675][T28416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1381.720086][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:47:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x1e00000000000000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400feffffff0000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1381.752563][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1381.782848][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1381.797887][T28398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1381.806945][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000000000000000025000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x52001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 00:47:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) 00:47:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000000000c485d000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1382.501593][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x0, 0xffff, 0x5}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0xffff31fd, 0x1ff}]}, 0xc, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x6, 0x7fff, 0x0, 0x13, '\x00@=\x00'}) r3 = syz_open_pts(r0, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000140)={0x7, 0xb5, 0x7f}) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001300)={0x2880008, r9}) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000002f40)=ANY=[@ANYBLOB="2a0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b22f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046b5a2aadef6a79b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002206a7c9625f5c5a190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004546413ac0e4660a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9e8b94500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000933cad6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c6399916663d4f28ec2bbc3cb826dc8fec2284ce6c336ed123e9ff4dff1f3deea3cd711aaa2b92dfe810110d465491fbd21e600346d77c8f484b1403008bc3e67b38e2c3d402924778f7949dcd4235ed9c80f85b97308b4b9832079705eb9333ddc3cdd98714b00"/7280]) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x4, @multicast, 'veth0_to_bond\x00'}}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x400000, 0x0, 0xfc, "bde2411819a16bb90fe8f25c730011d900"}) 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000000ffffff81000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1382.558417][T28457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x1800000000000000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000000000004d4000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1382.603334][T28466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1382.626811][T28447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000000000050d8000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1382.657117][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000200000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000c804) 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000300000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:28 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x52001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 00:47:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000400000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000c804) 00:47:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (rerun: 64) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) (async, rerun: 32) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x0, 0xffff, 0x5}) (async, rerun: 32) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0xffff31fd, 0x1ff}]}, 0xc, 0x0) (rerun: 32) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x6, 0x7fff, 0x0, 0x13, '\x00@=\x00'}) (async, rerun: 32) r3 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000140)={0x7, 0xb5, 0x7f}) (async) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001300)={0x2880008, r9}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000002f40)=ANY=[@ANYBLOB="2a0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b22f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046b5a2aadef6a79b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002206a7c9625f5c5a190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004546413ac0e4660a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9e8b94500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000933cad6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c6399916663d4f28ec2bbc3cb826dc8fec2284ce6c336ed123e9ff4dff1f3deea3cd711aaa2b92dfe810110d465491fbd21e600346d77c8f484b1403008bc3e67b38e2c3d402924778f7949dcd4235ed9c80f85b97308b4b9832079705eb9333ddc3cdd98714b00"/7280]) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) (async, rerun: 64) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x4, @multicast, 'veth0_to_bond\x00'}}) (rerun: 64) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x400000, 0x0, 0xfc, "bde2411819a16bb90fe8f25c730011d900"}) 00:47:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x52001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x52001) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) 00:47:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000c804) 00:47:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x477b0000, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000500000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000600000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000700000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) 00:47:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x0, 0xffff, 0x5}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0xffff31fd, 0x1ff}]}, 0xc, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x6, 0x7fff, 0x0, 0x13, '\x00@=\x00'}) (async) r3 = syz_open_pts(r0, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000140)={0x7, 0xb5, 0x7f}) (async) dup3(r3, r0, 0x0) (async, rerun: 64) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async, rerun: 64) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (rerun: 32) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001300)={0x2880008, r9}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000002f40)=ANY=[@ANYBLOB="2a0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b22f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046b5a2aadef6a79b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002206a7c9625f5c5a190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004546413ac0e4660a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9e8b94500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000933cad6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c6399916663d4f28ec2bbc3cb826dc8fec2284ce6c336ed123e9ff4dff1f3deea3cd711aaa2b92dfe810110d465491fbd21e600346d77c8f484b1403008bc3e67b38e2c3d402924778f7949dcd4235ed9c80f85b97308b4b9832079705eb9333ddc3cdd98714b00"/7280]) (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) (async) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x4, @multicast, 'veth0_to_bond\x00'}}) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x400000, 0x0, 0xfc, "bde2411819a16bb90fe8f25c730011d900"}) 00:47:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) 00:47:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8805780b", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000900000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000a00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:29 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8805780b", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:29 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:47:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) dup3(r0, r0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:29 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ffb3fe0f2c71628c5207a51cecf58871f6dea4c33cdced6c73a96825070e56a7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00fa000000"], 0x34}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%d \x00'}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, [@map_val={0x18, 0xe, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xf2b95bf}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0x3}], 0x10, 0xa5}, 0x90) 00:47:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8805780b", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) [ 1384.381072][T28563] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1384.397175][T28560] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000b00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ffb3fe0f2c71628c5207a51cecf58871f6dea4c33cdced6c73a96825070e56a7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00fa000000"], 0x34}}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%d \x00'}, 0x20) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, [@map_val={0x18, 0xe, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xf2b95bf}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0x3}], 0x10, 0xa5}, 0x90) 00:47:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000066000000210000000c000500000005002000000000000000000000000000a9be5a77f9ee3417e404bccd3d494adc48e48c9c0a1dcda4e9686ce2057cf38a9227828396c3846f0d83add5fa6ea09797b8e6326d00722f7a860b94e3404f2ee0751ca873df11d6ab8a8962ebd93a293dfc988f1d736924ba413895d6b4a4cf2c601503eb292e6ad4357afc738c61b7c20a"], 0x34}}, 0x0) 00:47:30 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:47:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000c00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:30 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000066000000210000000c000500000005002000000000000000000000000000a9be5a77f9ee3417e404bccd3d494adc48e48c9c0a1dcda4e9686ce2057cf38a9227828396c3846f0d83add5fa6ea09797b8e6326d00722f7a860b94e3404f2ee0751ca873df11d6ab8a8962ebd93a293dfc988f1d736924ba413895d6b4a4cf2c601503eb292e6ad4357afc738c61b7c20a"], 0x34}}, 0x0) 00:47:30 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:47:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ffb3fe0f2c71628c5207a51cecf58871f6dea4c33cdced6c73a96825070e56a7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00fa000000"], 0x34}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%d \x00'}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, [@map_val={0x18, 0xe, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xf2b95bf}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0x3}], 0x10, 0xa5}, 0x90) 00:47:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) dup3(r0, r0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000d00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:30 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) [ 1385.136953][T28598] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1385.227781][T28609] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000066000000210000000c000500000005002000000000000000000000000000a9be5a77f9ee3417e404bccd3d494adc48e48c9c0a1dcda4e9686ce2057cf38a9227828396c3846f0d83add5fa6ea09797b8e6326d00722f7a860b94e3404f2ee0751ca873df11d6ab8a8962ebd93a293dfc988f1d736924ba413895d6b4a4cf2c601503eb292e6ad4357afc738c61b7c20a"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000066000000210000000c000500000005002000000000000000000000000000a9be5a77f9ee3417e404bccd3d494adc48e48c9c0a1dcda4e9686ce2057cf38a9227828396c3846f0d83add5fa6ea09797b8e6326d00722f7a860b94e3404f2ee0751ca873df11d6ab8a8962ebd93a293dfc988f1d736924ba413895d6b4a4cf2c601503eb292e6ad4357afc738c61b7c20a"], 0x34}}, 0x0) (async) 00:47:31 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r8, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4804}, 0x4000001) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r9) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000e00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) dup3(r0, r0, 0x0) (async) dup3(r0, r0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:31 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:47:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0xa0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000f00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400001000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1385.919987][T28628] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1385.937882][T28620] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1385.959507][T28628] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) 00:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1, {0x0, r6}}) 00:47:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0xa0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400001100000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0xa0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:32 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}]}, 0x34}}, 0x0) 00:47:32 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r8, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r8, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4804}, 0x4000001) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4804}, 0x4000001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r9) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400001200000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400002500000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1048e94ff4628b31a48d2e4956f899b5d6709ef262533fe9eeb338a3886108001121567ed1a7ccc622c416d7b4141f87ef1865f6e460f3ae6e8348e057c3438a02838984bfad05ecf766e7d4ed9603f33f7603eff474dc055c510d6aab755b1eec27d02d60d8ccdd48b191c41c7a1a1e6ee061387d6379d85a6369e454f0ab483ba25fea506a8516ebfb2b8263755aa6419c3e9ffa3d41deb4f0e3da7baa1de59dc3ed8a689d56463a609080ada9c923f00f8474b4000000000000", @ANYRESDEC=r1, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r10, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000001300)={0x2880008, r10}) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f00000000c0)={0x0, r10, 0x8000, 0x65, 0x7, 0x7f}) 00:47:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 32) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1, {0x0, r6}}) [ 1386.824907][T28665] __nla_validate_parse: 21 callbacks suppressed [ 1386.824967][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1386.834181][T28659] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1386.844894][T28662] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1386.864831][T28666] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) 00:47:32 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r4) 00:47:32 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r8, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4804}, 0x4000001) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r9) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1386.918717][T28675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1386.944196][T28680] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) 00:47:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004c00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1386.974324][T28682] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1386.976057][T28685] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1386.998275][T28691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1387.045015][T28695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:33 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x40}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x0, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x37, 0x0, 0x0, 0x0, 0x4, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) 00:47:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1, {0x0, r6}}) 00:47:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1048e94ff4628b31a48d2e4956f899b5d6709ef262533fe9eeb338a3886108001121567ed1a7ccc622c416d7b4141f87ef1865f6e460f3ae6e8348e057c3438a02838984bfad05ecf766e7d4ed9603f33f7603eff474dc055c510d6aab755b1eec27d02d60d8ccdd48b191c41c7a1a1e6ee061387d6379d85a6369e454f0ab483ba25fea506a8516ebfb2b8263755aa6419c3e9ffa3d41deb4f0e3da7baa1de59dc3ed8a689d56463a609080ada9c923f00f8474b4000000000000", @ANYRESDEC=r1, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r10, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000001300)={0x2880008, r10}) (async) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f00000000c0)={0x0, r10, 0x8000, 0x65, 0x7, 0x7f}) 00:47:33 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x40}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x0, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x37, 0x0, 0x0, 0x0, 0x4, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006800000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r3}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001300)={0x2880008, r7}) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1048e94ff4628b31a48d2e4956f899b5d6709ef262533fe9eeb338a3886108001121567ed1a7ccc622c416d7b4141f87ef1865f6e460f3ae6e8348e057c3438a02838984bfad05ecf766e7d4ed9603f33f7603eff474dc055c510d6aab755b1eec27d02d60d8ccdd48b191c41c7a1a1e6ee061387d6379d85a6369e454f0ab483ba25fea506a8516ebfb2b8263755aa6419c3e9ffa3d41deb4f0e3da7baa1de59dc3ed8a689d56463a609080ada9c923f00f8474b4000000000000", @ANYRESDEC=r1, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r10, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000001300)={0x2880008, r10}) (async) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f00000000c0)={0x0, r10, 0x8000, 0x65, 0x7, 0x7f}) [ 1387.743949][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1387.782438][T28712] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006c00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:33 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x40}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x0, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x37, 0x0, 0x0, 0x0, 0x4, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x4, 0x0, "0040001e1d113c812ee88effffffffffff0d08"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7f) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r6 = syz_io_uring_setup(0x890, &(0x7f0000000300)={0x0, 0x4a30, 0x0, 0x0, 0x3da}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'tunl0\x00'}) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000080), &(0x7f0000000540)={0x0, 0xfb, 0xa6, 0x1, 0x7, "f3be96fdf03a77227bdfa05054b8b0ba", "e264a7d37302a24d7f5689810a5b2ca48ac1b976c2b85573a29443a5ab48c6f9995608dadcb5a33bd371c36a7d20b2a69d2048d4ed0a6b2b43bd803d9a0efee1745660ce77baf4a77f88161cd885e32f4b95f6505c912647539f00dfb91c21cd5eb185e53672b33d79dea1098c3828de69265c0f50e7e8a19c68287f6b6a0398e25812a1e03a4f57984a67a44507a16aa5"}, 0xa6, 0x1) io_uring_enter(r6, 0x13ce, 0xbb32, 0xc, &(0x7f0000000000)={[0x7]}, 0x8) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1387.815480][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1387.874247][T28736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400007400000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) 00:47:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100828bd7000fcdbdf251400000008001c00", @ANYRES32=r8, @ANYBLOB="080001000360d6ef"], 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x20000010) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r10, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4008000) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r18, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x4, 0x0, "0040001e1d113c812ee88effffffffffff0d08"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7f) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000300)={0x0, 0x4a30, 0x0, 0x0, 0x3da}, &(0x7f0000000140), &(0x7f0000000040)) (async) r6 = syz_io_uring_setup(0x890, &(0x7f0000000300)={0x0, 0x4a30, 0x0, 0x0, 0x3da}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'tunl0\x00'}) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000080), &(0x7f0000000540)={0x0, 0xfb, 0xa6, 0x1, 0x7, "f3be96fdf03a77227bdfa05054b8b0ba", "e264a7d37302a24d7f5689810a5b2ca48ac1b976c2b85573a29443a5ab48c6f9995608dadcb5a33bd371c36a7d20b2a69d2048d4ed0a6b2b43bd803d9a0efee1745660ce77baf4a77f88161cd885e32f4b95f6505c912647539f00dfb91c21cd5eb185e53672b33d79dea1098c3828de69265c0f50e7e8a19c68287f6b6a0398e25812a1e03a4f57984a67a44507a16aa5"}, 0xa6, 0x1) io_uring_enter(r6, 0x13ce, 0xbb32, 0xc, &(0x7f0000000000)={[0x7]}, 0x8) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400007a00000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000003000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1388.571827][T28754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1388.605882][T28765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000005000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x4, 0x0, "0040001e1d113c812ee88effffffffffff0d08"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x4, 0x0, "0040001e1d113c812ee88effffffffffff0d08"}) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7f) (async) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7f) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r6 = syz_io_uring_setup(0x890, &(0x7f0000000300)={0x0, 0x4a30, 0x0, 0x0, 0x3da}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'tunl0\x00'}) (async) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'tunl0\x00'}) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r8}) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000080), &(0x7f0000000540)={0x0, 0xfb, 0xa6, 0x1, 0x7, "f3be96fdf03a77227bdfa05054b8b0ba", "e264a7d37302a24d7f5689810a5b2ca48ac1b976c2b85573a29443a5ab48c6f9995608dadcb5a33bd371c36a7d20b2a69d2048d4ed0a6b2b43bd803d9a0efee1745660ce77baf4a77f88161cd885e32f4b95f6505c912647539f00dfb91c21cd5eb185e53672b33d79dea1098c3828de69265c0f50e7e8a19c68287f6b6a0398e25812a1e03a4f57984a67a44507a16aa5"}, 0xa6, 0x1) io_uring_enter(r6, 0x13ce, 0xbb32, 0xc, &(0x7f0000000000)={[0x7]}, 0x8) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000006000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1388.656491][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000007000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000009000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) 00:47:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100828bd7000fcdbdf251400000008001c00", @ANYRES32=r8, @ANYBLOB="080001000360d6ef"], 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x20000010) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r10, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4008000) (async) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r18, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000a000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x6e4d) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r1, r2, 0x80000) connect$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r5 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0xf4, 0x0, &(0x7f0000000700)=[@dead_binder_done, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x7, 0x0, 0x12}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x7, 0x0, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/141, 0x8d, 0x0, 0x34}, @fd={0x66642a85, 0x0, r9}}, &(0x7f00000006c0)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x3}], 0x7f, 0x0, &(0x7f0000000800)="cc372c4b491ce48c3bba094f0c502e937a95874544f92c7b912e73cbb92bb34e44ba2218f189317343756b3362d429f6194beb8e45322d61cf5c418add1aaadfb3af6e57dfa096c1dc8664c13d4b2488b34aa6e450884b237d88de424721db4802d30472eb9d39cb6d6cc47cb24254f2f944b67feb4fa4d683ebc50a5aac33"}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (async) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000b000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100828bd7000fcdbdf251400000008001c00", @ANYRES32=r8, @ANYBLOB="080001000360d6ef"], 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x20000010) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r10, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4008000) (async) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r18, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) 00:47:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000040)={0x0, 0xb02, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote={0xac, 0xcc, 0x6}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x10}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async, rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) (rerun: 64) [ 1389.459491][T28797] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000c000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:34 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) 00:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000d000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000e000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000000f000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000011000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1389.623688][T28820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1389.661779][T28833] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x6e4d) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x6e4d) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) (async) r3 = syz_open_pts(r0, 0x0) dup3(r1, r2, 0x80000) (async) r4 = dup3(r1, r2, 0x80000) connect$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r5 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0xf4, 0x0, &(0x7f0000000700)=[@dead_binder_done, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x7, 0x0, 0x12}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x7, 0x0, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/141, 0x8d, 0x0, 0x34}, @fd={0x66642a85, 0x0, r9}}, &(0x7f00000006c0)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x3}], 0x7f, 0x0, &(0x7f0000000800)="cc372c4b491ce48c3bba094f0c502e937a95874544f92c7b912e73cbb92bb34e44ba2218f189317343756b3362d429f6194beb8e45322d61cf5c418add1aaadfb3af6e57dfa096c1dc8664c13d4b2488b34aa6e450884b237d88de424721db4802d30472eb9d39cb6d6cc47cb24254f2f944b67feb4fa4d683ebc50a5aac33"}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000012000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:35 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a203227a8e9000000000a03000000004000000000010000000900010073797a30000000002c000000030a0102000008235c0000000100000009000b0073797a31000000000900010073797a2e4ae59a29b6027f001000010000000000001000000000000a"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES16=r4, @ANYBLOB="040028530f00fbdbdf253c0200000800010050006784b84f4dc601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afb8a640d0ca7554cc9617f60e6dacc3cf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="020e5dd5", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d48487428266ba76df251300000008000300face0aaf55e19a0a2626", @ANYRES32=r9, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x20, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x64, 0x9}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x80000001}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)={0xc8, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x32}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2426a48effe9fc669484b575314c487ef898fefa63036f09"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "79f7b9db880890e50e4f8322cbf57ff04029a4d978e9872b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4a001}, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x284, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x94, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}]}, {0x74, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xe, 0x1, '[:}!(@\x8dU\x91&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x7, 0x1, '(:!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xb, 0x1, '+)\\$%]-'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xdc, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0xa, 0x1, '\\)+:/^'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x7, 0x1, '#(['}, {0x9, 0x1, '%,@\\%'}]}, {0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '!\'-'}, {0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x6, 0x1, 'n('}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0xb, 0x1, '\\{\xa3&.#/'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x284}}, 0x40) 00:47:35 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}}, 0x0) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000025000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:35 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}}, 0x0) 00:47:35 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}}, 0x0) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000dd34000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:35 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) [ 1390.393385][T28859] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x6e4d) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r3 = syz_open_pts(r0, 0x0) (async, rerun: 32) r4 = dup3(r1, r2, 0x80000) (rerun: 32) connect$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) (async) r5 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) (async, rerun: 64) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0xf4, 0x0, &(0x7f0000000700)=[@dead_binder_done, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0x7, 0x0, 0x12}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x7, 0x0, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/141, 0x8d, 0x0, 0x34}, @fd={0x66642a85, 0x0, r9}}, &(0x7f00000006c0)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x3}], 0x7f, 0x0, &(0x7f0000000800)="cc372c4b491ce48c3bba094f0c502e937a95874544f92c7b912e73cbb92bb34e44ba2218f189317343756b3362d429f6194beb8e45322d61cf5c418add1aaadfb3af6e57dfa096c1dc8664c13d4b2488b34aa6e450884b237d88de424721db4802d30472eb9d39cb6d6cc47cb24254f2f944b67feb4fa4d683ebc50a5aac33"}) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004136000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1390.492411][T28885] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(0xffffffffffffffff, r0, 0x0) r1 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000008a71e000005000000000000ddb08d502d89be0009001f007068793000000000"], 0x34}}, 0x0) 00:47:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400003641000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:36 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) 00:47:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a203227a8e9000000000a03000000004000000000010000000900010073797a30000000002c000000030a0102000008235c0000000100000009000b0073797a31000000000900010073797a2e4ae59a29b6027f001000010000000000001000000000000a"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES16=r4, @ANYBLOB="040028530f00fbdbdf253c0200000800010050006784b84f4dc601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afb8a640d0ca7554cc9617f60e6dacc3cf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="020e5dd5", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d48487428266ba76df251300000008000300face0aaf55e19a0a2626", @ANYRES32=r9, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d48487428266ba76df251300000008000300face0aaf55e19a0a2626", @ANYRES32=r9, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x20, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x64, 0x9}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x80000001}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)={0xc8, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x32}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2426a48effe9fc669484b575314c487ef898fefa63036f09"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "79f7b9db880890e50e4f8322cbf57ff04029a4d978e9872b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4a001}, 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)={0xc8, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x32}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2426a48effe9fc669484b575314c487ef898fefa63036f09"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "79f7b9db880890e50e4f8322cbf57ff04029a4d978e9872b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4a001}, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x284, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x94, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}]}, {0x74, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xe, 0x1, '[:}!(@\x8dU\x91&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x7, 0x1, '(:!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xb, 0x1, '+)\\$%]-'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xdc, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0xa, 0x1, '\\)+:/^'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x7, 0x1, '#(['}, {0x9, 0x1, '%,@\\%'}]}, {0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '!\'-'}, {0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x6, 0x1, 'n('}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0xb, 0x1, '\\{\xa3&.#/'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x284}}, 0x40) (async) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x284, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x94, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}]}, {0x74, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xe, 0x1, '[:}!(@\x8dU\x91&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x7, 0x1, '(:!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xb, 0x1, '+)\\$%]-'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xdc, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0xa, 0x1, '\\)+:/^'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x7, 0x1, '#(['}, {0x9, 0x1, '%,@\\%'}]}, {0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '!\'-'}, {0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x6, 0x1, 'n('}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0xb, 0x1, '\\{\xa3&.#/'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x284}}, 0x40) 00:47:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$TCFLSH(r1, 0x540b, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_io_uring_setup(0x76cb, &(0x7f0000000280)={0x0, 0x8000000, 0x0, 0x0, 0x143}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) io_uring_enter(r3, 0x7ecc, 0x905, 0x1c, &(0x7f0000000340)={[0x5]}, 0x8) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r11}}) syz_io_uring_submit(r7, r6, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x0, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x7003, @fd_index=0x7, 0x22b, &(0x7f0000000440)=""/194, 0xc2, 0x10, 0x0, {0x0, r14}}) r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x8000000) r16 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x10000000) syz_io_uring_submit(r15, r16, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x5, 0x0, 0x3ff, 0x0, 0x1}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400008847000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000048000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000008a71e000005000000000000ddb08d502d89be0009001f007068793000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000008a71e000005000000000000ddb08d502d89be0009001f007068793000000000"], 0x34}}, 0x0) (async) 00:47:36 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) [ 1391.231367][T28907] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400008848000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x76cb, &(0x7f0000000280)={0x0, 0x8000000, 0x0, 0x0, 0x143}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) io_uring_enter(r3, 0x7ecc, 0x905, 0x1c, &(0x7f0000000340)={[0x5]}, 0x8) (async) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r11}}) (async) syz_io_uring_submit(r7, r6, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) (async) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x0, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) (async) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x7003, @fd_index=0x7, 0x22b, &(0x7f0000000440)=""/194, 0xc2, 0x10, 0x0, {0x0, r14}}) (async) r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x8000000) (async) r16 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x10000000) syz_io_uring_submit(r15, r16, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x5, 0x0, 0x3ff, 0x0, 0x1}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1391.358000][T28932] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(0xffffffffffffffff, r0, 0x0) r1 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000008a71e000005000000000000ddb08d502d89be0009001f007068793000000000"], 0x34}}, 0x0) 00:47:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000004c000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a203227a8e9000000000a03000000004000000000010000000900010073797a30000000002c000000030a0102000008235c0000000100000009000b0073797a31000000000900010073797a2e4ae59a29b6027f001000010000000000001000000000000a"], 0x74}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES16=r4, @ANYBLOB="040028530f00fbdbdf253c0200000800010050006784b84f4dc601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afb8a640d0ca7554cc9617f60e6dacc3cf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="020e5dd5", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d48487428266ba76df251300000008000300face0aaf55e19a0a2626", @ANYRES32=r9, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x20, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x64, 0x9}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x80000001}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)={0xc8, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x32}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2426a48effe9fc669484b575314c487ef898fefa63036f09"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "79f7b9db880890e50e4f8322cbf57ff04029a4d978e9872b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4a001}, 0x1) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x84) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x284, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x94, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, 'phy0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}]}, {0x74, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xe, 0x1, '[:}!(@\x8dU\x91&'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x7, 0x1, '(:!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xb, 0x1, '+)\\$%]-'}, {0x9, 0x1, 'phy0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xdc, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy0\x00'}, {0xa, 0x1, '\\)+:/^'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0xb, 0x1, 'NET_DM\x00'}, {0x7, 0x1, '#(['}, {0x9, 0x1, '%,@\\%'}]}, {0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '!\'-'}, {0xb, 0x1, 'NET_DM\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x9, 0x1, 'phy0\x00'}, {0x6, 0x1, 'n('}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, 'NET_DM\x00'}, {0xb, 0x1, '\\{\xa3&.#/'}, {0x9, 0x1, 'phy0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x284}}, 0x40) 00:47:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async, rerun: 64) ioctl$TCFLSH(r1, 0x540b, 0x0) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x76cb, &(0x7f0000000280)={0x0, 0x8000000, 0x0, 0x0, 0x143}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) io_uring_enter(r3, 0x7ecc, 0x905, 0x1c, &(0x7f0000000340)={[0x5]}, 0x8) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r11}}) (async) syz_io_uring_submit(r7, r6, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) (async) syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x0, 0x11b00}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x12}) (async) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x7003, @fd_index=0x7, 0x22b, &(0x7f0000000440)=""/194, 0xc2, 0x10, 0x0, {0x0, r14}}) (async) r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x8000000) (async, rerun: 32) r16 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x10000000) (rerun: 32) syz_io_uring_submit(r15, r16, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x5, 0x0, 0x3ff, 0x0, 0x1}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:37 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:37 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x8d0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:37 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) (async) [ 1392.107172][T28948] __nla_validate_parse: 21 callbacks suppressed [ 1392.107226][T28948] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1392.128560][T28951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1392.147294][T28949] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:37 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 1392.251130][T28976] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(0xffffffffffffffff, r0, 0x0) r1 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:38 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x0) 00:47:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400006558000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:38 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:38 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000007078"], 0x34}}, 0x0) 00:47:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000060000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x8d0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x8d0, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) (async) 00:47:38 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) [ 1392.989673][T28983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000007078"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000007078"], 0x34}}, 0x0) (async) 00:47:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400005865000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000006404000000000c000af900000007000000009f13475a7ab11049bd6981cc1bdd4cdf3a4d09c2add7d9ef7705c4514ee8820d3070c04c081123dac1dc0a58c56e16f404fc767ed8ebf95fa6df20bb28a3ea4becef2984f5ddc18a3f445724f751dd158843165552c1ab2cb644cfcefe697d74c2442c7beb09de832343a5b0745a95ab140000"], 0x28}, 0x1, 0x3000000000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r8) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r9, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80010}, 0x40d0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100104c000000000000040046fd00000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r11, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_KEY={0xbc, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b498a7b6da6f10c41f17705a09a43cb015dc9536520925f2a7bd8d6e315910f6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a00bf516ef71cdba8cd279dc9c0908934dde41c570c763269de405778e6ea374"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "163a02ab46408c8ddfc08e1eeafc5c12aa6d7755c45ed9d37c7189d9e5b462a4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bbae878d9c343f5e7e395cf72e8348096ca289f4a3cbcac07ecea481f3114364"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05fbb619fb1b125ea01bce9587c241f6"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 1393.059754][T29000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1393.126084][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1393.167792][T29008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1393.185109][T29003] ================================================================== [ 1393.193229][T29003] BUG: KCSAN: data-race in __tty_hangup / io_arm_poll_handler [ 1393.201399][T29003] [ 1393.203734][T29003] write to 0xffff88814c1ab5b0 of 8 bytes by task 28997 on cpu 0: [ 1393.211472][T29003] __tty_hangup+0x1e8/0x530 [ 1393.215981][T29003] tty_vhangup+0x17/0x20 [ 1393.220234][T29003] pty_close+0x262/0x280 [ 1393.224514][T29003] tty_release+0x204/0x930 [ 1393.228943][T29003] __fput+0x299/0x630 [ 1393.232944][T29003] ____fput+0x15/0x20 [ 1393.236937][T29003] task_work_run+0x135/0x1a0 [ 1393.241552][T29003] get_signal+0xf04/0x10a0 [ 1393.246011][T29003] arch_do_signal_or_restart+0x95/0x4b0 [ 1393.251579][T29003] exit_to_user_mode_loop+0x6f/0xe0 [ 1393.256779][T29003] exit_to_user_mode_prepare+0x6c/0xb0 [ 1393.262276][T29003] syscall_exit_to_user_mode+0x26/0x140 [ 1393.267835][T29003] do_syscall_64+0x50/0x110 [ 1393.272348][T29003] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1393.278344][T29003] [ 1393.280670][T29003] read to 0xffff88814c1ab5b0 of 8 bytes by task 29003 on cpu 1: [ 1393.288328][T29003] io_arm_poll_handler+0xb5/0x580 [ 1393.293379][T29003] io_queue_async+0x85/0x470 [ 1393.297969][T29003] io_req_task_submit+0x11c/0x130 [ 1393.303029][T29003] tctx_task_work+0x1af/0x4c0 [ 1393.307721][T29003] task_work_run+0x135/0x1a0 [ 1393.312320][T29003] get_signal+0xf04/0x10a0 [ 1393.316745][T29003] arch_do_signal_or_restart+0x95/0x4b0 [ 1393.322300][T29003] exit_to_user_mode_loop+0x6f/0xe0 [ 1393.327501][T29003] exit_to_user_mode_prepare+0x6c/0xb0 [ 1393.332993][T29003] syscall_exit_to_user_mode+0x26/0x140 [ 1393.338556][T29003] do_syscall_64+0x50/0x110 [ 1393.343071][T29003] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1393.349008][T29003] [ 1393.351441][T29003] value changed: 0xffffffff84e96138 -> 0xffffffff84e95fd0 [ 1393.358572][T29003] [ 1393.360890][T29003] Reported by Kernel Concurrency Sanitizer on: [ 1393.367035][T29003] CPU: 1 PID: 29003 Comm: syz-executor.3 Tainted: G W 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 1393.378927][T29003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1393.389161][T29003] ================================================================== 00:47:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000007078"], 0x34}}, 0x0) 00:47:39 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000068000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000006404000000000c000af900000007000000009f13475a7ab11049bd6981cc1bdd4cdf3a4d09c2add7d9ef7705c4514ee8820d3070c04c081123dac1dc0a58c56e16f404fc767ed8ebf95fa6df20bb28a3ea4becef2984f5ddc18a3f445724f751dd158843165552c1ab2cb644cfcefe697d74c2442c7beb09de832343a5b0745a95ab140000"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r8) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r9, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80010}, 0x40d0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100104c000000000000040046fd00000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r11, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_KEY={0xbc, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b498a7b6da6f10c41f17705a09a43cb015dc9536520925f2a7bd8d6e315910f6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a00bf516ef71cdba8cd279dc9c0908934dde41c570c763269de405778e6ea374"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "163a02ab46408c8ddfc08e1eeafc5c12aa6d7755c45ed9d37c7189d9e5b462a4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bbae878d9c343f5e7e395cf72e8348096ca289f4a3cbcac07ecea481f3114364"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05fbb619fb1b125ea01bce9587c241f6"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:47:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x8d0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async, rerun: 64) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:39 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:39 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000006c000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1393.852696][T29028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="0958ff03090000009b000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x18000) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r9) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r12, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}}, 0x1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000895}, 0x20028090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000006404000000000c000af900000007000000009f13475a7ab11049bd6981cc1bdd4cdf3a4d09c2add7d9ef7705c4514ee8820d3070c04c081123dac1dc0a58c56e16f404fc767ed8ebf95fa6df20bb28a3ea4becef2984f5ddc18a3f445724f751dd158843165552c1ab2cb644cfcefe697d74c2442c7beb09de832343a5b0745a95ab140000"], 0x28}, 0x1, 0x3000000000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r8) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r9, 0x201, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80010}, 0x40d0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100104c000000000000040046fd00000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r11, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_KEY={0xbc, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b498a7b6da6f10c41f17705a09a43cb015dc9536520925f2a7bd8d6e315910f6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a00bf516ef71cdba8cd279dc9c0908934dde41c570c763269de405778e6ea374"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "163a02ab46408c8ddfc08e1eeafc5c12aa6d7755c45ed9d37c7189d9e5b462a4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bbae878d9c343f5e7e395cf72e8348096ca289f4a3cbcac07ecea481f3114364"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05fbb619fb1b125ea01bce9587c241f6"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_KEY={0xbc, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b498a7b6da6f10c41f17705a09a43cb015dc9536520925f2a7bd8d6e315910f6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a00bf516ef71cdba8cd279dc9c0908934dde41c570c763269de405778e6ea374"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "163a02ab46408c8ddfc08e1eeafc5c12aa6d7755c45ed9d37c7189d9e5b462a4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bbae878d9c343f5e7e395cf72e8348096ca289f4a3cbcac07ecea481f3114364"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05fbb619fb1b125ea01bce9587c241f6"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:47:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000074000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1393.938010][T29044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1393.967156][T29046] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1394.019621][T29053] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1394.031710][T29046] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1394.031814][T29058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c0013040000007a000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7834bfa3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3742f7d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf7caa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9759}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb864}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57629d76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf963c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb4e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ba9ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14003a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa461}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x733b6859}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000440}, 0x20000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x20080084) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf25240000000a0001007770616e300000000a0001007770616e3300000008000200", @ANYRES32=r12, @ANYBLOB="0afe0000010024f1000100777061bde46d0000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x10, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x30}}, 0x0) 00:47:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="0958ff03090000009b000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x18000) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r9) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r12, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}}, 0x1) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000895}, 0x20028090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) r2 = syz_io_uring_setup(0x516b, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ftruncate(r2, 0x5) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011da"}) 00:47:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000081000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="0958ff03090000009b000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x18000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r9) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r12, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}}, 0x1) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000895}, 0x20028090) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:47:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7834bfa3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3742f7d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf7caa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9759}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb864}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57629d76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf963c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb4e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ba9ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14003a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa461}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x733b6859}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000440}, 0x20000010) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x20080084) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf25240000000a0001007770616e300000000a0001007770616e3300000008000200", @ANYRES32=r12, @ANYBLOB="0afe0000010024f1000100777061bde46d0000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x10, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x30}}, 0x0) 00:47:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004788000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400004888000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7834bfa3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3742f7d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf7caa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9759}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb864}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57629d76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf963c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb4e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ba9ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14003a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa461}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x733b6859}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000440}, 0x20000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x20080084) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r10, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf25240000000a0001007770616e300000000a0001007770616e3300000008000200", @ANYRES32=r12, @ANYBLOB="0afe0000010024f1000100777061bde46d0000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x10, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x30}}, 0x0) 00:47:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) [ 1394.833062][T29088] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 00:47:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c001304000034dd000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00ffde4c1eef2dd24d6b5d5e8c98fabceb18cf8b74f6eae98bc838552334dbc13246a4ddcef81ac4ef305f869a1ce53bdf4cc4f8427fc819abac5141c5f4fa802885fd2ef9bf5eb4a81661ef8e405a24bff32b97fe8b1a79446600fe3bebfb7a93b19ab12a649b622bb823546922ddd2fefaf86a0a239875a7f6dad214bc74b1d35471298bb553908e0031"], 0x14}}, 0x0) 00:47:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) (async) dup3(r1, r0, 0x80000) r2 = syz_io_uring_setup(0x516b, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ftruncate(r2, 0x5) (async) ftruncate(r2, 0x5) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011da"}) 00:47:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r6, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x54, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xbb18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000826bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="48c449ae92d1ced498a9cf718ddb2b873afb714b258ff2ede67a5ad6452b0ae99e1fdf98c927c02d2d1c416344e3344ef4238958f5695a2867400b415c534ce4327557e350a7321bb0fb649b314169a3b157099b116d586505f10f13274324b256573fdbe373e69b75"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x8044) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x26}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="bd7f0000", @ANYRES16=r2, @ANYBLOB="200029bd7000fcdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x840) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r16, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r17, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000040030000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00ffde4c1eef2dd24d6b5d5e8c98fabceb18cf8b74f6eae98bc838552334dbc13246a4ddcef81ac4ef305f869a1ce53bdf4cc4f8427fc819abac5141c5f4fa802885fd2ef9bf5eb4a81661ef8e405a24bff32b97fe8b1a79446600fe3bebfb7a93b19ab12a649b622bb823546922ddd2fefaf86a0a239875a7f6dad214bc74b1d35471298bb553908e0031"], 0x14}}, 0x0) 00:47:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000003400000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000100000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000200000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000300000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ftruncate(r2, 0x5) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011da"}) 00:47:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000400000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00ffde4c1eef2dd24d6b5d5e8c98fabceb18cf8b74f6eae98bc838552334dbc13246a4ddcef81ac4ef305f869a1ce53bdf4cc4f8427fc819abac5141c5f4fa802885fd2ef9bf5eb4a81661ef8e405a24bff32b97fe8b1a79446600fe3bebfb7a93b19ab12a649b622bb823546922ddd2fefaf86a0a239875a7f6dad214bc74b1d35471298bb553908e0031"], 0x14}}, 0x0) 00:47:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r6, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x54, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xbb18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000826bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="48c449ae92d1ced498a9cf718ddb2b873afb714b258ff2ede67a5ad6452b0ae99e1fdf98c927c02d2d1c416344e3344ef4238958f5695a2867400b415c534ce4327557e350a7321bb0fb649b314169a3b157099b116d586505f10f13274324b256573fdbe373e69b75"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x8044) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x26}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) (async, rerun: 64) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="bd7f0000", @ANYRES16=r2, @ANYBLOB="200029bd7000fcdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x840) (async, rerun: 64) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r16, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r17, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000500000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r9) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 00:47:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000600000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:41 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:41 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r6, 0xa50491f815e8250f, 0x0, 0x0, {0x12}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x54, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xbb18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000826bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="48c449ae92d1ced498a9cf718ddb2b873afb714b258ff2ede67a5ad6452b0ae99e1fdf98c927c02d2d1c416344e3344ef4238958f5695a2867400b415c534ce4327557e350a7321bb0fb649b314169a3b157099b116d586505f10f13274324b256573fdbe373e69b75"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x8044) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x26}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="bd7f0000", @ANYRES16=r2, @ANYBLOB="200029bd7000fcdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x840) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r16, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r17, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000700000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1396.543644][T29169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:47:42 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r9) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000800000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b32e563c1f95f5ae735528879195ffc7a5e4dea72dedd2e28c1f", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000000000009002000000000001f0070687930000000000000"], 0x34}}, 0x0) 00:47:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x16, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000900000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b32e563c1f95f5ae735528879195ffc7a5e4dea72dedd2e28c1f", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000000000009002000000000001f0070687930000000000000"], 0x34}}, 0x0) 00:47:42 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000c0005000000000000000000050020000000000009001f007068793000000000"], 0x34}}, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r9) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async, rerun: 32) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r6, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000a00000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b32e563c1f95f5ae735528879195ffc7a5e4dea72dedd2e28c1f", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000000000009002000000000001f0070687930000000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b32e563c1f95f5ae735528879195ffc7a5e4dea72dedd2e28c1f", @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000c000500000000000000000009002000000000001f0070687930000000000000"], 0x34}}, 0x0) (async) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000b00000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:42 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000c00000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x16, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14dfff00", @ANYRES16=r6, @ANYBLOB="ebbf00000000000000000100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r9) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0383}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x0) 00:47:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000d00000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"/322], 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x50, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40040810) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) 00:47:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1397.594141][T29268] __nla_validate_parse: 19 callbacks suppressed [ 1397.594160][T29268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14dfff00", @ANYRES16=r6, @ANYBLOB="ebbf00000000000000000100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0383}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x0) 00:47:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"/322], 0x34}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x50, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40040810) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) 00:47:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000e00000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x16, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) [ 1397.652838][T29267] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000000f00000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:43 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"/322], 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000fa0a0000000000210000e00c0005000000000000000000050020000000000009001f0070687930000000008e33750fb3bcc802a1f750a345fc98e9daa9646b29291079a5b825a06a1e674534dad7b455ce75aa85722faef31c9cf8f02850559804472f08b92f56fbb9ae2abc787922d1f40bdc173b35a9c885ce7d4199967841b0b45edc579840703b89c5c87ef9049a3095ff62f8800100e6e1de921b44be06e161b884d6a53084a6ad7c36efff68f76db579da41be1746666c4bbe93457dfc1926636403827fa36e2da22cca1abdeb0f73de32a15fe7e428782233cc05d34693d84e75e4c07ce1b399f93cce2eef8ed01575e0a8a2ea47566615a81ffc07eb74118c59e3399c48b93a6779d1b011a3ccacd75eb3c86cf00d4b2947f8859dd866bf7bdeb8e6fd3344779412eb4b56f39f587c00"/322], 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x50, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40040810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r5, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r14, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) [ 1397.715858][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1397.752663][T29289] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:47:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r3, 0xe69ccfb76974bfeb, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14dfff00", @ANYRES16=r6, @ANYBLOB="ebbf00000000000000000100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0383}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x0) 00:47:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000001000000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) [ 1397.771917][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000001100000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000205b969d922d44e0035d16cb6d3857e296fecf17680854c6c8c51b706630348d246d5aa00270dfdedf2150679f160000000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000400000008000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r2, 0x100, 0x2, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) r12 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x30}}, 0x408dd) [ 1397.853600][T29318] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1397.868213][T29322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1397.921589][T29333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1397.934679][T29334] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 00:47:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$KDSETLED(r1, 0x4b32, 0x7f) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 00:47:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 00:47:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c00130400000000001200000a000000", @ANYRES32=0x0, @ANYBLOB="00000800140001"], 0x38}}, 0x0) 00:47:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000205b969d922d44e0035d16cb6d3857e296fecf17680854c6c8c51b706630348d246d5aa00270dfdedf2150679f160000000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000400000008000100000000000c000a000000000700000000"], 0x28}, 0x1, 0x3000000000000}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) (rerun: 32) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x38, r2, 0x100, 0x2, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r3) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x4}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '\x00\x00\x00\a\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) (async) r12 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x800) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x30}}, 0x408dd) 00:47:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x516b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x890, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "bde2412a19a16bb9fde7f2bb2aca5c730011d9"}) 00:47:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetl