syzkaller login: [ 56.748855] sshd (238) used greatest stack depth: 23680 bytes left Warning: Permanently added '[localhost]:22797' (ECDSA) to the list of known hosts. 2024/11/10 00:10:04 fuzzer started 2024/11/10 00:10:04 dialing manager at localhost:46317 [ 71.343575] cgroup: Unknown subsys name 'net' [ 71.448431] cgroup: Unknown subsys name 'cpuset' [ 71.497119] cgroup: Unknown subsys name 'rlimit' 2024/11/10 00:10:21 syscalls: 201 2024/11/10 00:10:21 code coverage: enabled 2024/11/10 00:10:21 comparison tracing: enabled 2024/11/10 00:10:21 extra coverage: enabled 2024/11/10 00:10:21 setuid sandbox: enabled 2024/11/10 00:10:21 namespace sandbox: enabled 2024/11/10 00:10:21 Android sandbox: enabled 2024/11/10 00:10:21 fault injection: enabled 2024/11/10 00:10:21 leak checking: enabled 2024/11/10 00:10:21 net packet injection: enabled 2024/11/10 00:10:21 net device setup: enabled 2024/11/10 00:10:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/10 00:10:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/10 00:10:21 USB emulation: enabled 2024/11/10 00:10:21 hci packet injection: enabled 2024/11/10 00:10:21 wifi device emulation: enabled 2024/11/10 00:10:21 802.15.4 emulation: enabled 2024/11/10 00:10:21 fetching corpus: 0, signal 0/0 (executing program) 2024/11/10 00:10:23 starting 8 fuzzer processes 00:10:23 executing program 0: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4, 0x36, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x48, 0x2, 0x2, "b19cebecc5fc5b92985559a58e20fdb9faf351cef7539db6bd869fecf1b30b127bee9df67e87e7baf51dae8e7c55a35b5833466cb5ba98bde4c828fdb290195748647a3335813668"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x13, 0x2, 0x70bd25, 0x25dfdbfb, {0x1d, 0x3, 0x4, 0x80, {0x4e20, 0x4e24, [0x4, 0x7, 0x0, 0x4], [0x4, 0x0, 0x5, 0xa8f], r0, [0x5, 0x1]}, 0x4, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x32, 0x1, "fe7c3b7dc995c6d061a3bffc57b677c2cd44561e3408d82f3945f9420f431a7f38844a3cf453979bf2356ebdbdbe"}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)={'b', ' *:* ', 'r\x00'}, 0x8) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)=0x80000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400a4}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf056}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x847d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000700)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r3, 0x50a, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe85a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2002c8c1}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x200400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000008c0)) syz_open_dev$sg(&(0x7f0000000900), 0xffffffffffff90dd, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe8, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x216}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe9c}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x51}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004810}, 0x20000000) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) 00:10:23 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c0, r0, 0x400, 0x70bd28, 0x8, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3da8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ebe8c5d}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb97f}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0d30e464601abc09c017e2812848ff030289b76c3461de657220e67483d56385dcdf"}}, @TIPC_NLA_NODE_ID={0x71, 0x3, "5c0584b6407d263530f55e2dc9219a45e0f75489bd4157690e81179a285b4bedd994bb9fedcba8868adc054228061fb4fa31b76e483b70c784ca1902434f000387ea8f54b63b8fe7f63e5ee8927e97634800348fbe7b177c9b94e85709e0af56bfe15154bc3d09117479015850"}]}]}, 0x1c0}}, 0x20000804) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff46e}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x67}]}, 0x64}}, 0x80014) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0xa36ee63a7834b681) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x80) pidfd_getfd(r5, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) syz_genetlink_get_family_id$net_dm(&(0x7f0000000980), r6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000009c0)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x13c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xfc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcbf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffdf4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x25, 0x3, "7d2a11ec832691286b38597896f88986db39e8ef00dd3e14a376a6357908fc0990"}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1b4, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "760bc15eb058c5b1efe0dfb38927bdc6030b524f9faac51edff01964"}}, @TIPC_NLA_NODE_ID={0x45, 0x3, "9326da3b68601a8fc9ffa04d2da305f157c34e70a30ab86c45cf5f7ce0b392e1dd651c1f882464355586553befecdf78d6b3ca681396e9238a028e36725c52ce4d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "b9cfe2c628df3b957811bbb4e7fb529526eec9cccba9eb3f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xac20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe4c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8050}, 0x4040000) 00:10:23 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x48040) r0 = socket(0x15, 0x4, 0x6e) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4851) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x555a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x46}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c040) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000800) socket(0x2a, 0xa, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xdc55a93a815a2f7f}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x88}}, 0x24008001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x68}}, 0x44011) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20002080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3b02fd62b8836c5e}, 0x4001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x230, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {0x21, 0xff, 0xf, 0x7, {0x4e21, 0x4e21, [0x9, 0xa9, 0x2, 0x5], [0x2, 0x101, 0x0, 0x7f], 0x0, [0x5, 0x9]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "e75f9616457b7cc1fadc390e98260e0a2ea7c7b574153f7bb24ba724becab606ce95da2c425b07cc21ebc2e287fcfc1a879ab317c2331172a7e2443cc69bc7b84ced7057e2d2a710d0085e2578f32853200ccb1d483d7653fa43074bbdc25e3b78d1bab2ce65432ebf9bc928e861b803ec172c12a314c75773a993b2e0e3e047994121ac124133f7072437568627abd08c8201c3884663d52bdb6ae56a772d10206020f8aff1194d4e283cef36c447caa09c8d"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "1c899d6f3de5e9e8a568e96898af56f94100bd97821d0f75450869b184fa9c5368d5b8440ee3b5ce903f4330113dc4b76d79ce3d43d3bd2853efe99139b0f9fb8cb621b5fe05f2c4bac9f798ab47dc0bf755583100f3893751f4da971a2419df61041ef957f2435306965e35cfcd7a"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "b61ce7d0b40d1aad2bfe23234775a962922c81dada72fa4d8c7442d2cd5f00fca503630bf0a8f71d7000e466c7e47aca88b53bf563f5118d9297a927897ce45bc2e7202539bb2466d84bb9125479f7c750cdd5d0016f15dc3e0931d6c98f99e09fb4e9c290483156873461d84c85b597f8976db0d64ebbc9179b53dad08818c415be72f993e19b0303b86c5e35128fcca08a907423412c6a7c90a9d5de95476d896d5ddd20d19366cc765184b6613da9382135"}]}, 0x230}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 00:10:23 executing program 3: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x414, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c6d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x174, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x91, @remote, 0xffff14cb}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xdb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private2, 0xffff}}}}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x67}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002014}, 0x24004000) socketpair(0x2a, 0x4, 0x9, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xbc, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008001}, 0x20048890) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r3) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x8850) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe0, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc140000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74e}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c552696}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0xe0}}, 0x20044080) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x70}, 0x40800) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x4008000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4000811) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 00:10:23 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0x10000000) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) process_mrelease(r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x48}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8a}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x815}, 0x4000804) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x14c, 0x12, 0x20, 0x70bd2a, 0x25dfdbfd, {0x1e, 0x83, 0x9, 0x1, {0x4e21, 0x4e24, [0x3, 0x9, 0x4, 0x4b], [0x1, 0xfff, 0x7ff, 0x4], 0x0, [0x5, 0x7fff]}, 0x2, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "bedfe84d3c12f7e162178c37b45ca79daff1b901b28d5faebe56046140c764fc6a38f62c2c85a03ffd473bde29d1ea7092b7030fa934e8b50e325a0afd92d80a54dae948b57f432bb89d0362d89eabecf6bcfaf9615160"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "c9485561967c536b4e648351879307830afa306d4648275514f17af663f66da5ba3771068a0fc91a6c8b48d9f327fe6235f23de04b5db5b8830e40b63edaa5e9e39c26dc486f1364edd0b49d907862a6939decefbcd10e316c5b6112dc03d81393c1189bfd21baa21a1de9d255c7a188c9ff3828590fb972471d55722532f98a0649c11f9b9c50abaec57de15073ee1f9161d7b4164af42d5b1c27e73c209d"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x5) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x63}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb3, 0x3, "b55979901e30c11c25c32005595027fd080cfaed463ac47e3c5ee1424da3331d6c08c4f82909ba9da0acf590e6df581d3a663595d3cc3561b9e41bb618d2adc07f5a482efc88fe3644809cd381a759b1e6a3b2fc05fdf323f924a063ca74b6617f7dd4fb2b908a3f66201e8e6393479a2ac9e349e3a69a217ee2ef1cf57a4340d447a9bd1d274b6ec6784f4284f868fec35e91bdfaea5e4a928c4bd66730d683b4484d3319e9d53a186645825e140c"}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff80}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000014) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70a}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008000}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x214000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1) [ 89.342697] audit: type=1400 audit(1731197423.449:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:10:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x68001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}, 0x10001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe991}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20004015}, 0x40041) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x24004880) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r3 = socket(0x2a, 0x3, 0x4) socketpair(0x9, 0x800, 0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xb, 0x5c14c65e5a50f34a, 0x1ff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4204000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4008005) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008080) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x8001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20010084) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x84, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044800}, 0x840) 00:10:23 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbde}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20000411) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) r3 = pidfd_getfd(r0, r0, 0x0) process_madvise(r3, &(0x7f00000007c0)=[{&(0x7f00000003c0)="f871520f676c2470359f49d22a4e205cd04f87b743c98880e1112c0ca1a2adc66c08bae81139ebee17aa0758425c3c40508e6a1b1dc8d1d7a76f0e778b0c0c40f53cc1e53f607cb32d5607c39f2dd22898eea4429f3ae4a4f55d78b99bb55cee3fec208ec01d28a46e870599017bf9dd246c7f0c890af5e171b8c9ccd9c9f7fc14efbb7426487a931129217681b1cbfa5591a3c44d50720c1da3f165d675130b2cae0feee5ee0f4b903389a83715c6ff3635619b46a613484765b8dc2a7c98c83d82359d2b576084a31ebc64920303c85c4ab148fa2e41d08dce229e69600712dfda182910004d1c3186", 0xea}, {&(0x7f00000004c0)="64d1a51382a2c3122f9d94ec890f6bed272a", 0x12}, {&(0x7f0000000500)="e8cfe2e367a2cedfdf17dff83a6d59c5bf994dc05cd5140ea8b83e3576ab93546db3f315e00f5a145d4875238339411b3f9a0fd61d14627827971a1d5c74a916741b39bb3a285f7378048a76902f3902997ae7c69f43fdab38feabc610cf6e5204fdea7417cdde", 0x67}, {&(0x7f0000000580)="98ab84113ff32639d5584c09a305740e0c2e17e177d1a8a73f3c2d04fe5195cd0072f71b7d4ad591b72949f1c43c7eb60dacb6b24a1888b3dda2c60399ec9c874fdc62deffdd2cbf881ebe159d1885274b2a968f54f6e0ad8dddcb1b1d", 0x5d}, {&(0x7f0000000600)="a12fed5e9f15a651f6252c99460e63630d98260c3ad55641cdc191cf73cd854a34a4d854d88cd915629849b306ff755739d17cd983cf4973101b93f8a41508d078f3b51aa6b5c3d538078aa1cd2c2f9498778d7c4437244e3e60e79a2b02361393c8e3589d2ea386c0c5049fd2dcb9503818d3fbe4f96aec0af6dcb669fad22dd994ea551b3266d210153e769eb63a1b51d26189a08b1200e70c36d4e3477d634dcb23e11ff5", 0xa6}, {&(0x7f00000006c0)="73f4f9df0adf12004671f119fadb3872c04664b3ab5eb66a496f686fe1ecc5701114d4740cc921da0cb3ed583e3014f234dd7747cb001de3dfd44ea1ef5b28edc147bc6012a5383dabcba1ca1f6cecddb0c22c9ca3b186a24508bafcd4036ab882bf3cd3e79b9570982c024d5b8acc9971b93dc36884e514d8927c9ede9aa49240cdaf7365325bbf48b00503e77abe0472e3dae790a8ac6dffd1b20fe56b901a2363db5e5df2334c11bbf39ddc52ef2c988b2dc08990c2989b40eac6f67f1e7d803075694ea19f", 0xc7}], 0x6, 0x11, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x6810}, 0x804) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fffffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000800) r6 = syz_open_dev$usbmon(&(0x7f0000000b80), 0xf1be, 0x610000) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000c80)={&(0x7f0000000bc0), &(0x7f0000000c00)=""/103, 0x67}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x170, r7, 0x1, 0x1, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xec, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3c1}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x86}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffe00}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x8094) process_mrelease(r0, 0x0) 00:10:23 executing program 6: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc6d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x14010}, 0x8000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000001c0)=0x1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0x4a8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd105}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf759}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @remote, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe034}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x34}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x92e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0xd41f8c96ffeb9c64}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = pidfd_getfd(r0, r0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf30}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2400c840}, 0xbf45091ab64cd55a) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10043}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x81}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40800) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000bc0)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000c00)) clone3(&(0x7f0000000dc0)={0x10040100, &(0x7f0000000c40)=0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000cc0), {0x2f}, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/39, &(0x7f0000000d80)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) waitid$P_PIDFD(0x3, r4, &(0x7f0000000e40), 0x20000000, &(0x7f0000000ec0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000fc0), 0x408080, 0x0) pidfd_send_signal(r5, 0x1f, &(0x7f0000001000)={0x3c, 0x6, 0x8}, 0x0) [ 90.956877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.958680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.961457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.962634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.965118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.965810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.966885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.972297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.977862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.978640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.980918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.981733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.982944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.984020] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.996667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.013948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.015778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.017731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.027678] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.030667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.032425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.033304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.039695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.049501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.050857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.055732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.056673] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.062453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.086342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.088267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.089418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.090491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.106190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.106944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.108107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.112470] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.113389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.116252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.118242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.121444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.122325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.129839] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.129965] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.131529] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.142439] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.143233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.144688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.145770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.038573] Bluetooth: hci0: command tx timeout [ 93.039362] Bluetooth: hci2: command tx timeout [ 93.102173] Bluetooth: hci1: command tx timeout [ 93.166217] Bluetooth: hci5: command tx timeout [ 93.168034] Bluetooth: hci3: command tx timeout [ 93.168303] Bluetooth: hci4: command tx timeout [ 93.230214] Bluetooth: hci7: command tx timeout [ 93.230359] Bluetooth: hci6: command tx timeout [ 95.086393] Bluetooth: hci0: command tx timeout [ 95.087158] Bluetooth: hci2: command tx timeout [ 95.150314] Bluetooth: hci1: command tx timeout [ 95.214439] Bluetooth: hci5: command tx timeout [ 95.214933] Bluetooth: hci3: command tx timeout [ 95.215584] Bluetooth: hci4: command tx timeout [ 95.279124] Bluetooth: hci7: command tx timeout [ 95.279619] Bluetooth: hci6: command tx timeout [ 97.134283] Bluetooth: hci0: command tx timeout [ 97.135259] Bluetooth: hci2: command tx timeout [ 97.198191] Bluetooth: hci1: command tx timeout [ 97.262478] Bluetooth: hci3: command tx timeout [ 97.263199] Bluetooth: hci4: command tx timeout [ 97.263674] Bluetooth: hci5: command tx timeout [ 97.327187] Bluetooth: hci6: command tx timeout [ 97.327684] Bluetooth: hci7: command tx timeout [ 99.183208] Bluetooth: hci2: command tx timeout [ 99.183226] Bluetooth: hci0: command tx timeout [ 99.247262] Bluetooth: hci1: command tx timeout [ 99.310219] Bluetooth: hci4: command tx timeout [ 99.312109] Bluetooth: hci5: command tx timeout [ 99.312136] Bluetooth: hci3: command tx timeout [ 99.374213] Bluetooth: hci6: command tx timeout [ 99.377212] Bluetooth: hci7: command tx timeout [ 153.150937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.156533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.158517] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.173502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.176259] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.178460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.353692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.356438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.358085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.365457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.367931] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.369459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.410874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.417477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.432543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.447782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.451299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.472326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.473668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.481463] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.483165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.484571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.492548] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.493743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.499386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.518850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.528013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.541399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.550688] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.552651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.559340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.561402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.566152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.571683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.589542] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.594402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.640632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.647336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.651409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.680894] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.718425] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.724874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.192584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.205789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.226704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.284295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.294663] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.299282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.247325] Bluetooth: hci0: command tx timeout [ 155.448178] Bluetooth: hci1: command tx timeout [ 155.566122] Bluetooth: hci3: command tx timeout [ 155.631238] Bluetooth: hci4: command tx timeout [ 155.631256] Bluetooth: hci5: command tx timeout [ 155.631608] Bluetooth: hci2: command tx timeout [ 155.887976] Bluetooth: hci6: command tx timeout [ 156.335255] Bluetooth: hci7: command tx timeout [ 157.296109] Bluetooth: hci0: command tx timeout [ 157.487121] Bluetooth: hci1: command tx timeout [ 157.614203] Bluetooth: hci3: command tx timeout [ 157.678191] Bluetooth: hci4: command tx timeout [ 157.678229] Bluetooth: hci2: command tx timeout [ 157.678736] Bluetooth: hci5: command tx timeout [ 157.934124] Bluetooth: hci6: command tx timeout [ 158.383278] Bluetooth: hci7: command tx timeout [ 159.342136] Bluetooth: hci0: command tx timeout [ 159.534155] Bluetooth: hci1: command tx timeout [ 159.662217] Bluetooth: hci3: command tx timeout [ 159.726135] Bluetooth: hci5: command tx timeout [ 159.729204] Bluetooth: hci2: command tx timeout [ 159.729265] Bluetooth: hci4: command tx timeout [ 159.984145] Bluetooth: hci6: command tx timeout [ 160.432092] Bluetooth: hci7: command tx timeout [ 161.390160] Bluetooth: hci0: command tx timeout [ 161.582120] Bluetooth: hci1: command tx timeout [ 161.710431] Bluetooth: hci3: command tx timeout [ 161.774246] Bluetooth: hci2: command tx timeout [ 161.774753] Bluetooth: hci5: command tx timeout [ 161.775821] Bluetooth: hci4: command tx timeout [ 162.030148] Bluetooth: hci6: command tx timeout [ 162.479171] Bluetooth: hci7: command tx timeout [ 192.811020] hrtimer: interrupt took 5666438 ns [ 215.852506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.857595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.858496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.867260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.868591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.869404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.871758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.873771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.874481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.875273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.875865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.877307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.878515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.880789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.883313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.887995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.888849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.893352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.934670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.936370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.937571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.942326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.946491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.947597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.004869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.014725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.015879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.038370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.058666] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.060470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.078283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.079358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.085003] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.102647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.113799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.126655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.128295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.152675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.169358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.169422] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.181293] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.191408] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.200400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.239370] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.262288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.266342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.287837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.288738] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.903101] Bluetooth: hci0: command tx timeout [ 217.966148] Bluetooth: hci1: command tx timeout [ 217.967246] Bluetooth: hci2: command tx timeout [ 218.030121] Bluetooth: hci3: command tx timeout [ 218.158283] Bluetooth: hci4: command tx timeout [ 218.288084] Bluetooth: hci6: command tx timeout [ 218.351248] Bluetooth: hci7: command tx timeout [ 218.353107] Bluetooth: hci5: command tx timeout [ 219.951777] Bluetooth: hci0: command tx timeout [ 220.014164] Bluetooth: hci2: command tx timeout [ 220.014675] Bluetooth: hci1: command tx timeout [ 220.078150] Bluetooth: hci3: command tx timeout [ 220.206116] Bluetooth: hci4: command tx timeout [ 220.334122] Bluetooth: hci6: command tx timeout [ 220.398639] Bluetooth: hci7: command tx timeout [ 220.399209] Bluetooth: hci5: command tx timeout [ 221.998104] Bluetooth: hci0: command tx timeout [ 222.062160] Bluetooth: hci2: command tx timeout [ 222.062655] Bluetooth: hci1: command tx timeout [ 222.126254] Bluetooth: hci3: command tx timeout [ 222.256747] Bluetooth: hci4: command tx timeout [ 222.382315] Bluetooth: hci6: command tx timeout [ 222.446280] Bluetooth: hci5: command tx timeout [ 222.447864] Bluetooth: hci7: command tx timeout [ 224.046104] Bluetooth: hci0: command tx timeout [ 224.110884] Bluetooth: hci1: command tx timeout [ 224.111454] Bluetooth: hci2: command tx timeout [ 224.174184] Bluetooth: hci3: command tx timeout [ 224.304093] Bluetooth: hci4: command tx timeout [ 224.430832] Bluetooth: hci6: command tx timeout [ 224.494118] Bluetooth: hci7: command tx timeout [ 224.495536] Bluetooth: hci5: command tx timeout [ 278.024829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.026890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.031647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.040988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.049878] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.059442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.086573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.092329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.102377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.107600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.111253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.113449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.267663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.272573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.275646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.279473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.282421] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.283592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.464361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.476295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.483388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.484585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.486394] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.489259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.490941] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.491988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.502532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.504807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.517264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.519582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.519693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.520734] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.522794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.524094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.526835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.528584] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.529720] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.533138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.541470] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.555742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.579898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.593528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.647309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.649316] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.650960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.713721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.736326] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.737548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.110341] Bluetooth: hci0: command tx timeout [ 280.174132] Bluetooth: hci1: command tx timeout [ 280.304088] Bluetooth: hci2: command tx timeout [ 280.560098] Bluetooth: hci6: command tx timeout [ 280.561161] Bluetooth: hci3: command tx timeout [ 280.686325] Bluetooth: hci4: command tx timeout [ 280.750391] Bluetooth: hci5: command tx timeout [ 280.815100] Bluetooth: hci7: command tx timeout [ 282.158152] Bluetooth: hci0: command tx timeout [ 282.222269] Bluetooth: hci1: command tx timeout [ 282.350123] Bluetooth: hci2: command tx timeout [ 282.606149] Bluetooth: hci3: command tx timeout [ 282.606756] Bluetooth: hci6: command tx timeout [ 282.734221] Bluetooth: hci4: command tx timeout [ 282.798133] Bluetooth: hci5: command tx timeout [ 282.862123] Bluetooth: hci7: command tx timeout [ 284.206107] Bluetooth: hci0: command tx timeout [ 284.270269] Bluetooth: hci1: command tx timeout [ 284.398484] Bluetooth: hci2: command tx timeout [ 284.654174] Bluetooth: hci6: command tx timeout [ 284.654733] Bluetooth: hci3: command tx timeout [ 284.782098] Bluetooth: hci4: command tx timeout [ 284.846191] Bluetooth: hci5: command tx timeout [ 284.910212] Bluetooth: hci7: command tx timeout [ 286.254140] Bluetooth: hci0: command tx timeout [ 286.318353] Bluetooth: hci1: command tx timeout [ 286.446205] Bluetooth: hci2: command tx timeout [ 286.702127] Bluetooth: hci3: command tx timeout [ 286.704113] Bluetooth: hci6: command tx timeout [ 286.830090] Bluetooth: hci4: command tx timeout [ 286.895046] Bluetooth: hci5: command tx timeout [ 286.958189] Bluetooth: hci7: command tx timeout [ 340.678427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.681726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.689875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.692877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.696383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.697547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.700635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.703208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.704337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.706415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.708360] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.717681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.810644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.813289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.815556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.818642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.820429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.821777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.830439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.832884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.850256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.863521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.865417] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.866684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.931708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.943233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.955679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.956668] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.966356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.974782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.987807] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.990224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.992451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.992829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.995259] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.999319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.000505] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.001966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.004446] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.005690] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.014256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.025086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.037185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.040149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.041618] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.042760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.043801] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.046565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.766330] Bluetooth: hci0: command tx timeout [ 342.767293] Bluetooth: hci1: command tx timeout [ 342.895240] Bluetooth: hci2: command tx timeout [ 342.895281] Bluetooth: hci3: command tx timeout [ 343.087102] Bluetooth: hci7: command tx timeout [ 343.087121] Bluetooth: hci5: command tx timeout [ 343.150315] Bluetooth: hci6: command tx timeout [ 343.150727] Bluetooth: hci4: command tx timeout [ 344.814151] Bluetooth: hci0: command tx timeout [ 344.816083] Bluetooth: hci1: command tx timeout [ 344.942292] Bluetooth: hci3: command tx timeout [ 344.943075] Bluetooth: hci2: command tx timeout [ 345.134141] Bluetooth: hci5: command tx timeout [ 345.135101] Bluetooth: hci7: command tx timeout [ 345.199073] Bluetooth: hci4: command tx timeout [ 345.199550] Bluetooth: hci6: command tx timeout [ 346.862242] Bluetooth: hci1: command tx timeout [ 346.862274] Bluetooth: hci0: command tx timeout [ 346.990166] Bluetooth: hci2: command tx timeout [ 346.990664] Bluetooth: hci3: command tx timeout [ 347.182112] Bluetooth: hci7: command tx timeout [ 347.182133] Bluetooth: hci5: command tx timeout [ 347.246168] Bluetooth: hci6: command tx timeout [ 347.246274] Bluetooth: hci4: command tx timeout [ 348.910187] Bluetooth: hci1: command tx timeout [ 348.910458] Bluetooth: hci0: command tx timeout [ 349.038094] Bluetooth: hci3: command tx timeout [ 349.038132] Bluetooth: hci2: command tx timeout [ 349.230125] Bluetooth: hci5: command tx timeout [ 349.231407] Bluetooth: hci7: command tx timeout [ 349.294103] Bluetooth: hci4: command tx timeout [ 349.295198] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:15:34 Registers: info registers vcpu 0 RAX=ffffffff818b8234 RBX=ffffffff813ef450 RCX=ffffffff86839201 RDX=1ffff11006a64f3a RSI=ffffffff818b8234 RDI=ffff888035327a40 RBP=ffff888035327a10 RSP=ffff888035327978 R8 =ffffffff86839270 R9 =ffff8880353279b8 R10=000000000003c001 R11=0000000000023c4f R12=ffff888035327a40 R13=0000000000000000 R14=ffff888034dfd280 R15=0000000000000cc0 RIP=ffffffff810d1082 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5da9e85540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffda78faa48 CR3=0000000035048000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff817a9519 RBX=ffffffff813ef450 RCX=0000000000000001 RDX=1ffff110062a5f52 RSI=ffffffff817a9519 RDI=ffff88803152fb00 RBP=ffff88803152fad0 RSP=ffff88803152fa30 R8 =0000000000000001 R9 =ffff88803152fa78 R10=000000000003c001 R11=0000000000006ac2 R12=ffff88803152fb00 R13=0000000000000000 R14=ffff888016029b80 R15=0000000000000cc0 RIP=ffffffff8485d2c0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff595e27260 CR3=0000000022352000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000