Warning: Permanently added '[localhost]:3845' (ECDSA) to the list of known hosts. 2022/10/01 17:16:36 fuzzer started 2022/10/01 17:16:37 dialing manager at localhost:35095 syzkaller login: [ 44.548402] cgroup: Unknown subsys name 'net' [ 44.678006] cgroup: Unknown subsys name 'rlimit' 2022/10/01 17:16:53 syscalls: 207 2022/10/01 17:16:53 code coverage: enabled 2022/10/01 17:16:53 comparison tracing: enabled 2022/10/01 17:16:53 extra coverage: enabled 2022/10/01 17:16:53 setuid sandbox: enabled 2022/10/01 17:16:53 namespace sandbox: enabled 2022/10/01 17:16:53 Android sandbox: enabled 2022/10/01 17:16:53 fault injection: enabled 2022/10/01 17:16:53 leak checking: enabled 2022/10/01 17:16:53 net packet injection: enabled 2022/10/01 17:16:53 net device setup: enabled 2022/10/01 17:16:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 17:16:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 17:16:53 USB emulation: enabled 2022/10/01 17:16:53 hci packet injection: enabled 2022/10/01 17:16:53 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 17:16:53 802.15.4 emulation: enabled 2022/10/01 17:16:53 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 17:16:54 starting 8 fuzzer processes 17:16:54 executing program 0: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40406) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r1 = socket(0x11, 0x5, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xce, 0x4, 0xf51}}}, [""]}, 0x30}}, 0x80cc) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0x3, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4e95}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x76}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf633}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb9a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x499a287ff454fd05) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x97}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x12000200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x8, 0x8e68, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x93de7156e216483c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x21}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) io_uring_setup(0x5c8d, &(0x7f0000000c00)={0x0, 0x9caf, 0x8, 0x0, 0x17e, 0x0, r6}) pipe2(&(0x7f0000000c80), 0x800) 17:16:54 executing program 1: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x48011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x20}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48090) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0000}, 0x20000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/meminfo\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7d}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:16:54 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3d7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044115}, 0x0) socketpair(0xf, 0x3, 0x5, &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x81) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='batadv\x00', 0x0, r2) write$cgroup_type(r0, &(0x7f0000000480), 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40941) sendmsg$AUDIT_USER(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "51db9a60145b421bc981d9e9652819cff6528a2adf379cb59d4fe433c0aa2ed43da62c5c92cde71676f9df601f1857db2c93aa736a61083a91d5572e16015d5d9accaf434badb358fcd952de7ec747c977670cecfbcd1b3088485f451a3c59fd5a9d05cc5844", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x4008845}, 0x40000c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e9ee34b16cb4"}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe96}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8a7d7a95}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x24008045) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) 17:16:54 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, "8d34c41267d42f8c", "91feaf28528560dee17b5f162b71c0be", "d2310055", "39edeb068c88f4c7"}, 0x28) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/vt', 0x14000, 0x22) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x1) 17:16:54 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240000d4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1c000}, 0x4000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8084) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf23}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54113934}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x448c4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0xef7eea577eb50afb, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xee15}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008800) r3 = socket(0x23, 0x3, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r5 = socket(0x15, 0xa, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r2, 0x713, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000d40)=@get={0x1, &(0x7f0000000c40)=""/238, 0x1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e80), 0x20000, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000f00)=@add_del={0x2, &(0x7f0000000ec0)='xfrm0\x00'}) [ 61.269007] audit: type=1400 audit(1664644614.723:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:16:54 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/ptp', 0x100, 0x2) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "b728ecc69edd605f", "5b62683cbfc8f3455d31c7d76151e438", "1c53cadf", "b9494cb76530aaf5"}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socketpair(0x11, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) write$cgroup_type(r2, &(0x7f00000004c0), 0x9) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x38}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x18002c00}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd4, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x21}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xdbb}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004854}, 0x40) 17:16:54 executing program 6: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001180)={0x64, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd, @fd, @fda={0x66646185, 0x6, 0x1, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @increfs], 0x1000, 0x0, &(0x7f0000000180)="70ead279ec81d0bed758df21671356f93967efe40ea7ae383ab17031398a5ca3eba0fae03f7aa2ede997d489b37259e15e2cea9c8e42557dbfdaf880b28224974c9854cf638b805b900c140dd295419c4f5d7ed4c24a1de4059f121ce8378ae97deeaa049fd888344b0038e623fac46fb9aff9077a467e6bc0eefcc17271c8aa9f71ddff17f3dece2485b62ecb682b2530bee33b67ffbf14eb2b225f303cc16aadd108331185bbe2f89d073d59ae2e199eba8c6dd35c14e60e9b447e60a4fce588bfab6f2f8b2fcda291c497e8ae2ad51c36221489f9c2f24bfd9ed682fb0491b085dae3385052b49b7e91651d0a3a2868d5a094180c960e450b3d4c98b747252bc5423fae9e211e06c0b67029ff5406b8a76e434c3c5a633625ed6918d481ab89aa48919d7fc56d2cc0153e7eb234b4ee39cfb24325300d07d9d00e7c7b7394ac60b77b3d1f885de6f224917f4badcef6be9646e6690a1d5de9baabd27f053f329f98c802a3b1f3599c33278adfdfeecb67ff75f317b6c6c1a9f484a5a9b235e855869fe6df475e0775f4aeb6386a63e1e161dd7cbfd1db19883043cfcf785d0d24db99ef8f156d8daa677bf81c007755b52a13502e25f9438ad2cea54e89242babe497a9b88e3f8ba6e54e2f9f877d7d6e89a9afb18110676514516bbd90e7c6e8fd3ccb563d8c7c09600178a2eb57808e9f8c76aeb8289e42f6dcc0182df156039813afb450b65b98c12428a201410d65f65abeb6482633920a2e298002c4209e197118208bd0f776d67e312d2c7aa2832e5ca35399a1685ad802d6cfe94d52886329668ade31a9fffc44f72e03925ba169b90e48f875b9ae5274696d141db8c83883c7b628e1753d0b22bf29793fa62284a66fb1dceba4c9ce6db2e683cb8ec6473fef95049f5d9632a8f7ff8b1061d2f115e23b5d0639fff5a631dbcfb7fb36b1c569fc1a61e72e9502d8106cc7bb8bf99ee30d731a0c9fc650b382057e65ffbac9ecd86270f97c71f5c869be42d424b25fdd28234f2e876857c0f74926ee5b6ea19d8d7fa6961e93dfb997e2c1a5a923653c8b6a28b79e69903e3a0d982988c1b1113191b0c6a67f4f8bef32cbabe2716c70c39a5f519f1622c824878a00b8d526e5ed83eab7f82af3dc54551efb42b2a26adb13d7ce954d597a35bfdcff7c6666acf5073420f9c0f60c11f75222f21d7b36fd99233ce74b95fc3e542e589ee118582f66fe366f1e7b74bd74cdc5260b85bf211a5e0662a623f640d502e9eeb32126351f09acba074c20e69b72055e788b651fa30c792da4af236a933771184e2f356b9844f95d9075f2dea9c576927c972f731a774ba2d96881de509f675354fb429400cdb740c750309371d1e56575ade0a29e241aee00169f7a9fa6975bc4983e25872bc422361e902b5b2b075039eb616e68992ec66162af31f4f0e5814312f451f8f8d21f1961ad3eb1634e549c11df372ad53a9874249e14135e77907a1b24ff03260537ee46c14fa205f88a6284d766feeb4fcb4995b16c3b1b06f87f7df9a8678fe02f97c6fc658d3f6b9f09dc15641ea67617d6800f3a024e55bb06cc3086b3f4bcfd0b7337fd8061944ff89fcfa0569a90419d47fc7681946bde9824a64bf212d5dde1d75022ba7886184a5775bfd7876484bcde1c0933eefa6888de1543504d0b76729bde27fdefd8dbd25d782de051f24bd2f9e207fc628eaf15434e57548fb456c49892fa1df6c1ebfac3ad1e80a59685ad7937b35e00972da56443e542fbba4d97f7152a8b00798970a6d49c2bc02abac967fa5fe25761b816a3e77bcf50c7c3c839731bf9b07cde1f2620686c05979970cce3b2bd1762091d89ea42a82451ab8e3d8e5d57e88229f05843484e31ae6d8fae3e0b759160672cff11560c9409e3ab032d932ee1c52a5ebb0963d11f2e4ac0d50009feb7c82c511b0ea614e44df566616f4205ae31c7277790cae50593d220d398bf87801a6975dd8d538b0d92ba347a9b51947dd61e810300b922c1a722365b0d10ffbaf4ed7ff74d7cf3f881257ac9ef145b56e017e4bedcae668c35560b6eda3256558dbaf42a8cde2b16c110c746b756d4c1899a34d56568b65bf25b7abbd967fd07e5750d21f9cd282c5f9ed2cd60d225645e0fb80a83e7f1bb295efcba62a961fd19c7b9a5116ce0251ebb2fbc46a32559e9dd50451601f31bf2a12c4a17c3ba6003d0da61bb203524455feaa0605583a27dd7b6fe2b8867c21352c22db82d03ef4347c22f7dca731354e48c1fd999377de29a528d6d7aef3a5a6a455b3522841462083d530d015ca43e47ab6d14b26c4d0b653e3152387c4f7dc11a057683a07d3eabe24c7693f1eb3c8119e2233bc4800b7cee4c448b3edad9dc50e6e7d76d9b76569c7aab674903f03fe932c19b4f6b5afec9945b6c236a0f58a68903f262b111e7e414448fa2228a40ca436c5a94eaa4855ac3cbe379bc575f58c3bc39eb40a021bfda20577a8c38d433cbde93df831f30cd82e0d0548cb01c7ceed694c120cce7eece4dd435fd329cfadae15f983ad8ec2531d2f2bed271f0b512c34206b408ff219e9d6b91a871b63abe4535ba7c4cfe9488803bc5ccaaf3d92154be551bd0223cf9e46d842110aa4ad758442e7d79b3ed97cba98b9ecd1e4c867fbcf19836f83d3a083dcab7fe23a4b9762ed200f2812f5dbb7907f33eaf148f1fd1cacf5629ee2873fa5dcefa0bffa963cd6c23a62f032594c5c59f58cc2f57ed99cc25e8377b00a2511f47bd85df7e7a15b832c5d411a5de7d86774db014e93cbf521798ab19d83b7050705f76b916cb09a09378395e74df299536f5aa146303f3dbaf541a63e71656f00c778cdaf41551b6c25e2225bf94421922af6f3041dbde4ed4709e271affd4c8d6b12be56c0332eaa138b1a5ca7cb3606a533d0bd50d37b425f5cc16b210fd0980e339376c699804904e3cd4860753c68403eb721325423c9ff25a1f8d55a868256a7cc039f47922b42b882cbfe1d629ae800c64ac80b94148453258ff04abcea95afcdb922aa515da76873d543cfc58bc582b6dbc7d308fd6d0cde3eb7ef19d4d53284f75e4a37447a70c2819b1dabd7020bd38b7d766bdaf6a695e80f008d91a84e5eb09f12517aec03bc4e97a928c7ab203e015a0fe291a3b03271ea73a22c5bff81e289ba80d5e7dd6dc6c11b7bfce32797b30996c86df3f5a85d508d015d2b70f8c389ec774e62b4266a7735431cae8c873c1cb82ed2c18fb9cd126de46096198a1f1dc2a49a8d23a338286233ed72e57b5e95e65e3fc891cc6e95a1fd6ebaa1e817730a22259ab4f8fe2958ab961e03bfdf4a654d8a4b20d17f4dd82e0ff5837b650a705c65cd0bfdd005daa351841e76b97ceb69aef9b1a56799416d35b4a7be7460c19f41a346a642bf1c37e409a0f0f9ed531591dd99725dabfcda4ca7392e9b2f137addcd46556632744bd47402c4aa33339bf4469e3060c8736fccd1a6b9490fc05e33663580029297ba6a639d06c6ac5e2bd4da6fd75cd2745498b9d56bc564372ff1c9c6b60e398ae2e6075d4883dfa657863876bff50666e85bad93123defe058f2d0e4280199ace706d9ee7667ad16bed5c1da74309f9939cef50c846edd783b5b30029a07b4ead5593ba7681deb12f42e153ec126ff2d7939e4de86d80f2fef95b35e791a513ef55cc95bf81846b0b5176740e36a639869631edba2f13455c1637c6d7cdac37f7a58f6e8878912ef5d936fbf7daddd42681e74427536ec9b958d2a140e5d32df48027995550f57ec13feae74b1c7428fb43617ad17c7837d9c1a85aae1d2d2e8652a8b5e5a60ff52dd79f37f4f2ab0c8f6928c401663f1d56eeeacd95a3e7e3b0e57dda7f18154a3d4d2968bb5704d5f82500a314639710dabd33d4e451b1ca7f02a1b60a133987d349cfea7f56ded435fb8188c4496ce16ead2070af85b12b23dfa67711e9fa45bbb5f9976cc2712174e9f45389f1589fe819ae97e291bd9c850d4ef230dde6eb009ef1b6284847b57073158cd89f1d87be8dbfb830582326b1a5c617c91807ec79de39b6bbbc997628c10ddb22f71f4cdff27db9dbb6aafa6a507ef9607cfa9532882e3263a8f38a7e000628107a55bc789dac712e79610013fdaf3ff910b1d4adb5e1ef67293ff204e02b461acd8098a01aea39772db1fee25c249c77c622cc107e73b671a2fbaf0f86abdf6c364d15bb89a75f15f44f5542a8ab0f2f9834f5b7468904240f37fdb70c30f8c1c5242f3f578193cde649c75439bf10b2b339c869f897cbfabf117f6e4a7534a0bd047135b01e3440e37d22927d3cadd2677da6a0b3160376bc0ce827f1fa110ca2e5ff29f118519796ececc81b22c5bff4b63b5d36c0ab0db0b802e510aba5af872159ea1d3a5c160be0f6e4d0e8ea14169983ff21152bb780bf92ac6c7ef83aa8170d7ca6ec7b37d55767e6965ff4429dc98a393c1024fce4af3d9759a0463f4e537e4be58958d3def7a1e011ba7daaef2b84ff59f198849d6b3994b14b98ad7a02b0ce09ebc9800d3d2f47d076ebc79e388ce9178ff9701d663795134adfcc8a0b7ee247454a831ddaf2549ef53358fe6543eef2849e3af2c976d72aecd2639e62ed4d8ae7c9e9f73d2c7ddfa58649b644e56e293fccaf410f440bb5b3918c2aea128a115245e927ee98d117005bdab0b23249d5e71227ebef0d8cba413d131285d4948b80aba75da0bdcda5cb792922ed234d525ad4a99c6be411c9be3629570491f9910ba5fdbe7a380487c7b6b9e90ff5a2ba07b9b3f5e016f26559ad3381f808301f91c5b068abe37152e390e235eed2c2753e593ea8f6cb50dae9e9e59b3db1a4e7d4f2b6ba81354be64cd1242539531c3d9cb2a01a946715f59e931cc876ea12be1121f1a8c41ddf5bc915b1b5677c8e07bfa785198365f154ac99e2e7ea187e67d16aaf1a18d188130cab5bc7203e07117aa8f376a858f35bc706adadbadde09b63b3189bf3dc738669e6e3147210a32e794ff329ea410da925bf53ca4fe4005862b6fa6040f1a02f522b57aff7fa90fdc7c4e8e4d7fd1e7cf76c9228c56ebbf134fd07774132b538c971d648073d1b1e8fa5bbdf5b58c9fd9e8c3f4d512c7bcfe527bbf264c01ed1d971ea621f6d89905c05640f3ee9827abc6773bd5b44a5c1ef479c311872932e132c15b12798bb47230882bc51d3d46b64ef33c83418c4dbc7d5ef2a95bfe6739fa9dd9cd69ae86593e1a36ebd6746f68bfb59457f2471579ab2be80117838fddfb2a9b54b750c28eac9a2b03a71895e5304bec8c2e3237b83f77cdd8169fb5149ee36ac7224548e8cce4f5f58af2b295a4bf9ae456c2491694d86ea18886aaed871f5d931b937d234e85184d4888ebf1f1760e6c541198ef7f95c305832128394ed5e8b5638fc8f51d3d36198d605ea0f1eb6632dda42d6484be2c2d72c9c14b04f6af76bb46040906ef0d0ed185ca20a2d0f393555c703e8799cf80cd9376f83e8438333bf56ba9b9569ca376f75d162669cd475a97fdcd5452d52a70f0082d6971826efa4198dd316338c3ea52dd56b273e9a86bc243cf3cb6623791e799fe58e1220eb826a1faf70725b0fa788a5a9c800e12ecf2cf30b919f1da6c2ef0dac44e4683a22df78104da89f9703de92aa1333a1bd7c959eed9a324d93acc46dee3539ac9b855861d4c19f72a9d244e53a2f89735e170c28814289d094a49577fa7f71330262aac0440a671b512d7e0841f4396bc3447848f4259015a2b3e358d5d0ccc7625348d935"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffe0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs/custom0\x00', 0x800, 0x0) fstatfs(r0, &(0x7f0000001200)=""/138) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000012c0)={0x0, 0x1, 0x4}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000001300)=0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000001340)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001380)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0), 0x202000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001400)={0x73622a85, 0x3, 0x3}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x5) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xfc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c884}, 0x20040000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), r3) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xc8, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5d3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) 17:16:54 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10803}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x802908}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9efe93f7dd93a69401df67ecd9d9be727ee1f3e254917baf4716dadbdbe3eec0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x20000000) [ 62.602546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.606035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.607940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.609688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.631906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.633217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.636543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.637917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.639450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.641453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.645269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.646691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.648369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.650600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.652447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.657031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.658443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.659865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.662200] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.663766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.664918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.670054] Bluetooth: hci2: HCI_REQ-0x0c1a [ 62.670053] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.670820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.672763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.674466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.677132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.680196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.681268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.681656] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.684479] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.684547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.690023] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.691328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.691425] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.695061] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.696444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.697655] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.717190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.719097] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.720347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.724432] Bluetooth: hci7: HCI_REQ-0x0c1a [ 62.734873] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.736945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.738961] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.740936] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.743388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.745241] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.747828] Bluetooth: hci5: HCI_REQ-0x0c1a [ 62.795328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.799550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.804105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.814208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.821981] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.824492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.841217] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.723204] Bluetooth: hci1: command 0x0409 tx timeout [ 64.723939] Bluetooth: hci3: command 0x0409 tx timeout [ 64.724500] Bluetooth: hci2: command 0x0409 tx timeout [ 64.725080] Bluetooth: hci0: command 0x0409 tx timeout [ 64.786796] Bluetooth: hci5: command 0x0409 tx timeout [ 64.787398] Bluetooth: hci6: command 0x0409 tx timeout [ 64.787970] Bluetooth: hci7: command 0x0409 tx timeout [ 64.850832] Bluetooth: hci4: command 0x0409 tx timeout [ 66.771379] Bluetooth: hci0: command 0x041b tx timeout [ 66.771868] Bluetooth: hci2: command 0x041b tx timeout [ 66.772287] Bluetooth: hci3: command 0x041b tx timeout [ 66.772695] Bluetooth: hci1: command 0x041b tx timeout [ 66.835470] Bluetooth: hci7: command 0x041b tx timeout [ 66.835946] Bluetooth: hci6: command 0x041b tx timeout [ 66.836357] Bluetooth: hci5: command 0x041b tx timeout [ 66.898808] Bluetooth: hci4: command 0x041b tx timeout [ 68.818911] Bluetooth: hci1: command 0x040f tx timeout [ 68.819768] Bluetooth: hci3: command 0x040f tx timeout [ 68.820473] Bluetooth: hci2: command 0x040f tx timeout [ 68.821218] Bluetooth: hci0: command 0x040f tx timeout [ 68.882930] Bluetooth: hci5: command 0x040f tx timeout [ 68.883702] Bluetooth: hci6: command 0x040f tx timeout [ 68.884816] Bluetooth: hci7: command 0x040f tx timeout [ 68.946790] Bluetooth: hci4: command 0x040f tx timeout [ 70.867615] Bluetooth: hci0: command 0x0419 tx timeout [ 70.868411] Bluetooth: hci2: command 0x0419 tx timeout [ 70.869386] Bluetooth: hci3: command 0x0419 tx timeout [ 70.870157] Bluetooth: hci1: command 0x0419 tx timeout [ 70.930851] Bluetooth: hci7: command 0x0419 tx timeout [ 70.931596] Bluetooth: hci6: command 0x0419 tx timeout [ 70.932360] Bluetooth: hci5: command 0x0419 tx timeout [ 70.994793] Bluetooth: hci4: command 0x0419 tx timeout 17:17:53 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, "8d34c41267d42f8c", "91feaf28528560dee17b5f162b71c0be", "d2310055", "39edeb068c88f4c7"}, 0x28) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/vt', 0x14000, 0x22) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x1) 17:17:53 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, "8d34c41267d42f8c", "91feaf28528560dee17b5f162b71c0be", "d2310055", "39edeb068c88f4c7"}, 0x28) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/vt', 0x14000, 0x22) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x1) 17:17:54 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, "8d34c41267d42f8c", "91feaf28528560dee17b5f162b71c0be", "d2310055", "39edeb068c88f4c7"}, 0x28) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/vt', 0x14000, 0x22) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x1) 17:17:54 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, "8d34c41267d42f8c", "91feaf28528560dee17b5f162b71c0be", "d2310055", "39edeb068c88f4c7"}, 0x28) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/vt', 0x14000, 0x22) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) [ 123.987768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.989929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.991900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.994932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.996028] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.996844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.999509] Bluetooth: hci6: HCI_REQ-0x0c1a [ 125.970814] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 125.970836] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 125.972962] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 125.973401] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 126.035815] Bluetooth: hci6: command 0x0409 tx timeout [ 128.082804] Bluetooth: hci6: command 0x041b tx timeout [ 128.494364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.496580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.513347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.514579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.522016] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.523560] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.535815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.536837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.547465] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 128.550981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.552015] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.553799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.560837] Bluetooth: hci7: HCI_REQ-0x0c1a [ 128.565839] Bluetooth: hci4: HCI_REQ-0x0c1a [ 130.130920] Bluetooth: hci6: command 0x040f tx timeout [ 130.450770] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 130.514904] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 130.578839] Bluetooth: hci7: command 0x0409 tx timeout [ 130.643823] Bluetooth: hci4: command 0x0409 tx timeout [ 132.178800] Bluetooth: hci6: command 0x0419 tx timeout [ 132.626832] Bluetooth: hci7: command 0x041b tx timeout [ 132.690904] Bluetooth: hci4: command 0x041b tx timeout [ 134.674795] Bluetooth: hci7: command 0x040f tx timeout [ 134.738832] Bluetooth: hci4: command 0x040f tx timeout [ 134.994917] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 134.996584] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 136.722804] Bluetooth: hci7: command 0x0419 tx timeout [ 136.786918] Bluetooth: hci4: command 0x0419 tx timeout [ 137.441344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.443173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.444800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.447366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.449061] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.450344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.469913] Bluetooth: hci3: HCI_REQ-0x0c1a [ 137.536533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.545926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.551298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.561979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.565390] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.570011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.581994] Bluetooth: hci5: HCI_REQ-0x0c1a [ 139.539827] Bluetooth: hci3: command 0x0409 tx timeout [ 139.603791] Bluetooth: hci5: command 0x0409 tx timeout [ 141.586839] Bluetooth: hci3: command 0x041b tx timeout [ 141.650818] Bluetooth: hci5: command 0x041b tx timeout [ 143.634768] Bluetooth: hci3: command 0x040f tx timeout [ 143.699820] Bluetooth: hci5: command 0x040f tx timeout [ 145.682824] Bluetooth: hci3: command 0x0419 tx timeout [ 145.747761] Bluetooth: hci5: command 0x0419 tx timeout 17:18:49 executing program 1: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x48011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x20}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48090) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0000}, 0x20000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/meminfo\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7d}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:18:49 executing program 0: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40406) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r1 = socket(0x11, 0x5, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xce, 0x4, 0xf51}}}, [""]}, 0x30}}, 0x80cc) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0x3, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4e95}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x76}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf633}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb9a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x499a287ff454fd05) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x97}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x12000200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x8, 0x8e68, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x93de7156e216483c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x21}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) io_uring_setup(0x5c8d, &(0x7f0000000c00)={0x0, 0x9caf, 0x8, 0x0, 0x17e, 0x0, r6}) pipe2(&(0x7f0000000c80), 0x800) 17:18:49 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/ptp', 0x100, 0x2) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "b728ecc69edd605f", "5b62683cbfc8f3455d31c7d76151e438", "1c53cadf", "b9494cb76530aaf5"}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socketpair(0x11, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) write$cgroup_type(r2, &(0x7f00000004c0), 0x9) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x38}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x18002c00}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd4, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x21}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xdbb}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004854}, 0x40) 17:18:49 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10803}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x802908}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9efe93f7dd93a69401df67ecd9d9be727ee1f3e254917baf4716dadbdbe3eec0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x20000000) 17:18:49 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, "8d34c41267d42f8c", "91feaf28528560dee17b5f162b71c0be", "d2310055", "39edeb068c88f4c7"}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) 17:18:49 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240000d4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1c000}, 0x4000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8084) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf23}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54113934}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x448c4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0xef7eea577eb50afb, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xee15}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008800) r3 = socket(0x23, 0x3, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r5 = socket(0x15, 0xa, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r2, 0x713, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000d40)=@get={0x1, &(0x7f0000000c40)=""/238, 0x1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e80), 0x20000, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000f00)=@add_del={0x2, &(0x7f0000000ec0)='xfrm0\x00'}) 17:18:49 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3d7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044115}, 0x0) socketpair(0xf, 0x3, 0x5, &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x81) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='batadv\x00', 0x0, r2) write$cgroup_type(r0, &(0x7f0000000480), 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40941) sendmsg$AUDIT_USER(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "51db9a60145b421bc981d9e9652819cff6528a2adf379cb59d4fe433c0aa2ed43da62c5c92cde71676f9df601f1857db2c93aa736a61083a91d5572e16015d5d9accaf434badb358fcd952de7ec747c977670cecfbcd1b3088485f451a3c59fd5a9d05cc5844", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x4008845}, 0x40000c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e9ee34b16cb4"}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe96}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8a7d7a95}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x24008045) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) 17:18:49 executing program 6: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001180)={0x64, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd, @fd, @fda={0x66646185, 0x6, 0x1, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @increfs], 0x1000, 0x0, &(0x7f0000000180)="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"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffe0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs/custom0\x00', 0x800, 0x0) fstatfs(r0, &(0x7f0000001200)=""/138) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000012c0)={0x0, 0x1, 0x4}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000001300)=0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000001340)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001380)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0), 0x202000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001400)={0x73622a85, 0x3, 0x3}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x5) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xfc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c884}, 0x20040000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), r3) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xc8, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5d3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) [ 187.348396] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 187.349917] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.350876] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.352443] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.354639] Call Trace: [ 187.355147] [ 187.355493] __schedule+0x893/0x2470 [ 187.356098] ? io_schedule_timeout+0x150/0x150 [ 187.356798] ? do_raw_spin_lock+0x121/0x260 [ 187.357435] ? rwlock_bug.part.0+0x90/0x90 [ 187.358103] schedule+0xda/0x1b0 [ 187.358631] rescuer_thread+0x851/0xdb0 [ 187.359287] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.360068] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.360855] ? lockdep_hardirqs_on+0x79/0x100 [ 187.361543] ? worker_thread+0x1260/0x1260 [ 187.362231] kthread+0x2ed/0x3a0 [ 187.362773] ? kthread_complete_and_exit+0x40/0x40 [ 187.363522] ret_from_fork+0x22/0x30 [ 187.364141] [ 187.364504] INFO: task rcu_par_gp:4 blocked for more than 142 seconds. [ 187.365495] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.366313] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.367466] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.368733] Call Trace: [ 187.369120] [ 187.369476] __schedule+0x893/0x2470 [ 187.370095] ? io_schedule_timeout+0x150/0x150 [ 187.370820] ? do_raw_spin_lock+0x121/0x260 [ 187.371492] ? rwlock_bug.part.0+0x90/0x90 [ 187.372183] schedule+0xda/0x1b0 [ 187.372750] rescuer_thread+0x851/0xdb0 [ 187.373365] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.374146] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.374928] ? lockdep_hardirqs_on+0x79/0x100 [ 187.375812] ? worker_thread+0x1260/0x1260 [ 187.376605] kthread+0x2ed/0x3a0 [ 187.377261] ? kthread_complete_and_exit+0x40/0x40 [ 187.378048] ret_from_fork+0x22/0x30 [ 187.378634] [ 187.379031] INFO: task slub_flushwq:5 blocked for more than 142 seconds. [ 187.380037] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.380843] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.382007] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.383264] Call Trace: [ 187.383650] [ 187.384043] __schedule+0x893/0x2470 [ 187.384629] ? io_schedule_timeout+0x150/0x150 [ 187.385357] ? do_raw_spin_lock+0x121/0x260 [ 187.386058] ? rwlock_bug.part.0+0x90/0x90 [ 187.386745] schedule+0xda/0x1b0 [ 187.387301] rescuer_thread+0x851/0xdb0 [ 187.387947] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.388735] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.389491] ? lockdep_hardirqs_on+0x79/0x100 [ 187.390204] ? worker_thread+0x1260/0x1260 [ 187.390887] kthread+0x2ed/0x3a0 [ 187.391422] ? kthread_complete_and_exit+0x40/0x40 [ 187.392197] ret_from_fork+0x22/0x30 [ 187.392811] [ 187.393171] INFO: task netns:6 blocked for more than 142 seconds. [ 187.394089] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.394894] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.396060] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.397308] Call Trace: [ 187.397695] [ 187.398086] __schedule+0x893/0x2470 [ 187.398670] ? io_schedule_timeout+0x150/0x150 [ 187.399405] ? do_raw_spin_lock+0x121/0x260 [ 187.400113] ? rwlock_bug.part.0+0x90/0x90 [ 187.400812] schedule+0xda/0x1b0 [ 187.401340] rescuer_thread+0x851/0xdb0 [ 187.401996] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.402785] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.403574] ? lockdep_hardirqs_on+0x79/0x100 [ 187.404298] ? worker_thread+0x1260/0x1260 [ 187.404992] kthread+0x2ed/0x3a0 [ 187.405519] ? kthread_complete_and_exit+0x40/0x40 [ 187.406299] ret_from_fork+0x22/0x30 [ 187.406918] [ 187.407291] INFO: task kworker/0:0:7 blocked for more than 142 seconds. [ 187.408291] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.409109] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.410280] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.411564] Workqueue: 0x0 (rcu_gp) [ 187.412166] Call Trace: [ 187.412557] [ 187.412943] __schedule+0x893/0x2470 [ 187.413531] ? io_schedule_timeout+0x150/0x150 [ 187.414285] schedule+0xda/0x1b0 [ 187.414847] worker_thread+0x15f/0x1260 [ 187.415492] ? process_one_work+0x16a0/0x16a0 [ 187.416221] kthread+0x2ed/0x3a0 [ 187.416773] ? kthread_complete_and_exit+0x40/0x40 [ 187.417532] ret_from_fork+0x22/0x30 [ 187.418168] [ 187.418529] INFO: task kworker/0:0H:8 blocked for more than 142 seconds. [ 187.419539] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.420352] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.421490] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.422764] Workqueue: 0x0 (kblockd) [ 187.423373] Call Trace: [ 187.423800] [ 187.424158] __schedule+0x893/0x2470 [ 187.424779] ? io_schedule_timeout+0x150/0x150 [ 187.425504] schedule+0xda/0x1b0 [ 187.426071] worker_thread+0x15f/0x1260 [ 187.426738] ? process_one_work+0x16a0/0x16a0 [ 187.427446] kthread+0x2ed/0x3a0 [ 187.428003] ? kthread_complete_and_exit+0x40/0x40 [ 187.428778] ret_from_fork+0x22/0x30 [ 187.429370] [ 187.429761] INFO: task mm_percpu_wq:10 blocked for more than 142 seconds. [ 187.430791] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.431606] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.432766] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.434043] Call Trace: [ 187.434426] [ 187.434807] __schedule+0x893/0x2470 [ 187.435408] ? io_schedule_timeout+0x150/0x150 [ 187.436140] ? do_raw_spin_lock+0x121/0x260 [ 187.436835] ? rwlock_bug.part.0+0x90/0x90 [ 187.437504] schedule+0xda/0x1b0 [ 187.438062] rescuer_thread+0x851/0xdb0 [ 187.438681] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.439477] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.440267] ? lockdep_hardirqs_on+0x79/0x100 [ 187.441000] ? worker_thread+0x1260/0x1260 [ 187.441650] kthread+0x2ed/0x3a0 [ 187.442206] ? kthread_complete_and_exit+0x40/0x40 [ 187.443017] ret_from_fork+0x22/0x30 [ 187.443619] [ 187.444017] INFO: task rcu_tasks_kthre:11 blocked for more than 142 seconds. [ 187.445078] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.445894] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.447076] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.448348] Call Trace: [ 187.448764] [ 187.449124] __schedule+0x893/0x2470 [ 187.449749] ? io_schedule_timeout+0x150/0x150 [ 187.450455] ? mark_held_locks+0x9e/0xe0 [ 187.451120] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.451931] schedule+0xda/0x1b0 [ 187.452458] rcu_tasks_one_gp+0x3db/0xc10 [ 187.453158] rcu_tasks_kthread+0x80/0xa0 [ 187.453823] ? rcu_tasks_postscan+0x10/0x10 [ 187.454475] kthread+0x2ed/0x3a0 [ 187.455063] ? kthread_complete_and_exit+0x40/0x40 [ 187.455854] ret_from_fork+0x22/0x30 [ 187.456453] [ 187.456917] INFO: task kworker/1:0H:21 blocked for more than 142 seconds. [ 187.457972] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.458856] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.460020] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.461295] Workqueue: 0x0 (events_highpri) [ 187.462015] Call Trace: [ 187.462411] [ 187.462806] __schedule+0x893/0x2470 [ 187.463425] ? io_schedule_timeout+0x150/0x150 [ 187.464182] schedule+0xda/0x1b0 [ 187.464754] worker_thread+0x15f/0x1260 [ 187.465394] ? process_one_work+0x16a0/0x16a0 [ 187.466128] kthread+0x2ed/0x3a0 [ 187.466659] ? kthread_complete_and_exit+0x40/0x40 [ 187.467463] ret_from_fork+0x22/0x30 [ 187.468108] [ 187.468474] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.469504] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.470333] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.471529] task:inet_frag_wq state:I stack:30360 pid:23 ppid:2 flags:0x00004000 [ 187.472808] Call Trace: [ 187.473203] [ 187.473559] __schedule+0x893/0x2470 [ 187.474186] ? io_schedule_timeout+0x150/0x150 [ 187.474925] ? do_raw_spin_lock+0x121/0x260 [ 187.475604] ? rwlock_bug.part.0+0x90/0x90 [ 187.476299] schedule+0xda/0x1b0 [ 187.476869] rescuer_thread+0x851/0xdb0 [ 187.477488] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.478293] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.479110] ? lockdep_hardirqs_on+0x79/0x100 [ 187.479834] ? worker_thread+0x1260/0x1260 [ 187.480481] kthread+0x2ed/0x3a0 [ 187.481046] ? kthread_complete_and_exit+0x40/0x40 [ 187.481830] ret_from_fork+0x22/0x30 [ 187.482421] [ 187.482899] [ 187.482899] Showing all locks held in the system: [ 187.483875] 1 lock held by rcu_tasks_kthre/11: [ 187.484545] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.486046] 1 lock held by khungtaskd/26: [ 187.486655] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.488116] 1 lock held by in:imklog/212: [ 187.488778] 2 locks held by syz-executor/6300: [ 187.489464] [ 187.489766] ============================================= [ 187.489766] [ 187.859089] Bluetooth: hci2: command 0x0406 tx timeout [ 187.860051] Bluetooth: hci0: command 0x0406 tx timeout [ 187.860973] Bluetooth: hci1: command 0x0406 tx timeout 17:19:01 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240000d4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1c000}, 0x4000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8084) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf23}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54113934}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x448c4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0xef7eea577eb50afb, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xee15}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008800) r3 = socket(0x23, 0x3, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r5 = socket(0x15, 0xa, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r2, 0x713, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000d40)=@get={0x1, &(0x7f0000000c40)=""/238, 0x1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e80), 0x20000, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000f00)=@add_del={0x2, &(0x7f0000000ec0)='xfrm0\x00'}) 17:19:01 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10803}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x802908}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9efe93f7dd93a69401df67ecd9d9be727ee1f3e254917baf4716dadbdbe3eec0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x20000000) 17:19:01 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3d7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044115}, 0x0) socketpair(0xf, 0x3, 0x5, &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x81) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='batadv\x00', 0x0, r2) write$cgroup_type(r0, &(0x7f0000000480), 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40941) sendmsg$AUDIT_USER(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "51db9a60145b421bc981d9e9652819cff6528a2adf379cb59d4fe433c0aa2ed43da62c5c92cde71676f9df601f1857db2c93aa736a61083a91d5572e16015d5d9accaf434badb358fcd952de7ec747c977670cecfbcd1b3088485f451a3c59fd5a9d05cc5844", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x4008845}, 0x40000c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e9ee34b16cb4"}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe96}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8a7d7a95}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x24008045) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) 17:19:01 executing program 1: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x48011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x20}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48090) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0000}, 0x20000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/meminfo\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7d}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:19:01 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) 17:19:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/ptp', 0x100, 0x2) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "b728ecc69edd605f", "5b62683cbfc8f3455d31c7d76151e438", "1c53cadf", "b9494cb76530aaf5"}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socketpair(0x11, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) write$cgroup_type(r2, &(0x7f00000004c0), 0x9) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x38}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x18002c00}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd4, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x21}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xdbb}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004854}, 0x40) 17:19:01 executing program 0: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40406) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r1 = socket(0x11, 0x5, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xce, 0x4, 0xf51}}}, [""]}, 0x30}}, 0x80cc) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0x3, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4e95}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x76}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf633}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb9a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x499a287ff454fd05) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x97}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x12000200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x8, 0x8e68, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x93de7156e216483c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x21}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) io_uring_setup(0x5c8d, &(0x7f0000000c00)={0x0, 0x9caf, 0x8, 0x0, 0x17e, 0x0, r6}) pipe2(&(0x7f0000000c80), 0x800) 17:19:01 executing program 6: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001180)={0x64, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd, @fd, @fda={0x66646185, 0x6, 0x1, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @increfs], 0x1000, 0x0, &(0x7f0000000180)="70ead279ec81d0bed758df21671356f93967efe40ea7ae383ab17031398a5ca3eba0fae03f7aa2ede997d489b37259e15e2cea9c8e42557dbfdaf880b28224974c9854cf638b805b900c140dd295419c4f5d7ed4c24a1de4059f121ce8378ae97deeaa049fd888344b0038e623fac46fb9aff9077a467e6bc0eefcc17271c8aa9f71ddff17f3dece2485b62ecb682b2530bee33b67ffbf14eb2b225f303cc16aadd108331185bbe2f89d073d59ae2e199eba8c6dd35c14e60e9b447e60a4fce588bfab6f2f8b2fcda291c497e8ae2ad51c36221489f9c2f24bfd9ed682fb0491b085dae3385052b49b7e91651d0a3a2868d5a094180c960e450b3d4c98b747252bc5423fae9e211e06c0b67029ff5406b8a76e434c3c5a633625ed6918d481ab89aa48919d7fc56d2cc0153e7eb234b4ee39cfb24325300d07d9d00e7c7b7394ac60b77b3d1f885de6f224917f4badcef6be9646e6690a1d5de9baabd27f053f329f98c802a3b1f3599c33278adfdfeecb67ff75f317b6c6c1a9f484a5a9b235e855869fe6df475e0775f4aeb6386a63e1e161dd7cbfd1db19883043cfcf785d0d24db99ef8f156d8daa677bf81c007755b52a13502e25f9438ad2cea54e89242babe497a9b88e3f8ba6e54e2f9f877d7d6e89a9afb18110676514516bbd90e7c6e8fd3ccb563d8c7c09600178a2eb57808e9f8c76aeb8289e42f6dcc0182df156039813afb450b65b98c12428a201410d65f65abeb6482633920a2e298002c4209e197118208bd0f776d67e312d2c7aa2832e5ca35399a1685ad802d6cfe94d52886329668ade31a9fffc44f72e03925ba169b90e48f875b9ae5274696d141db8c83883c7b628e1753d0b22bf29793fa62284a66fb1dceba4c9ce6db2e683cb8ec6473fef95049f5d9632a8f7ff8b1061d2f115e23b5d0639fff5a631dbcfb7fb36b1c569fc1a61e72e9502d8106cc7bb8bf99ee30d731a0c9fc650b382057e65ffbac9ecd86270f97c71f5c869be42d424b25fdd28234f2e876857c0f74926ee5b6ea19d8d7fa6961e93dfb997e2c1a5a923653c8b6a28b79e69903e3a0d982988c1b1113191b0c6a67f4f8bef32cbabe2716c70c39a5f519f1622c824878a00b8d526e5ed83eab7f82af3dc54551efb42b2a26adb13d7ce954d597a35bfdcff7c6666acf5073420f9c0f60c11f75222f21d7b36fd99233ce74b95fc3e542e589ee118582f66fe366f1e7b74bd74cdc5260b85bf211a5e0662a623f640d502e9eeb32126351f09acba074c20e69b72055e788b651fa30c792da4af236a933771184e2f356b9844f95d9075f2dea9c576927c972f731a774ba2d96881de509f675354fb429400cdb740c750309371d1e56575ade0a29e241aee00169f7a9fa6975bc4983e25872bc422361e902b5b2b075039eb616e68992ec66162af31f4f0e5814312f451f8f8d21f1961ad3eb1634e549c11df372ad53a9874249e14135e77907a1b24ff03260537ee46c14fa205f88a6284d766feeb4fcb4995b16c3b1b06f87f7df9a8678fe02f97c6fc658d3f6b9f09dc15641ea67617d6800f3a024e55bb06cc3086b3f4bcfd0b7337fd8061944ff89fcfa0569a90419d47fc7681946bde9824a64bf212d5dde1d75022ba7886184a5775bfd7876484bcde1c0933eefa6888de1543504d0b76729bde27fdefd8dbd25d782de051f24bd2f9e207fc628eaf15434e57548fb456c49892fa1df6c1ebfac3ad1e80a59685ad7937b35e00972da56443e542fbba4d97f7152a8b00798970a6d49c2bc02abac967fa5fe25761b816a3e77bcf50c7c3c839731bf9b07cde1f2620686c05979970cce3b2bd1762091d89ea42a82451ab8e3d8e5d57e88229f05843484e31ae6d8fae3e0b759160672cff11560c9409e3ab032d932ee1c52a5ebb0963d11f2e4ac0d50009feb7c82c511b0ea614e44df566616f4205ae31c7277790cae50593d220d398bf87801a6975dd8d538b0d92ba347a9b51947dd61e810300b922c1a722365b0d10ffbaf4ed7ff74d7cf3f881257ac9ef145b56e017e4bedcae668c35560b6eda3256558dbaf42a8cde2b16c110c746b756d4c1899a34d56568b65bf25b7abbd967fd07e5750d21f9cd282c5f9ed2cd60d225645e0fb80a83e7f1bb295efcba62a961fd19c7b9a5116ce0251ebb2fbc46a32559e9dd50451601f31bf2a12c4a17c3ba6003d0da61bb203524455feaa0605583a27dd7b6fe2b8867c21352c22db82d03ef4347c22f7dca731354e48c1fd999377de29a528d6d7aef3a5a6a455b3522841462083d530d015ca43e47ab6d14b26c4d0b653e3152387c4f7dc11a057683a07d3eabe24c7693f1eb3c8119e2233bc4800b7cee4c448b3edad9dc50e6e7d76d9b76569c7aab674903f03fe932c19b4f6b5afec9945b6c236a0f58a68903f262b111e7e414448fa2228a40ca436c5a94eaa4855ac3cbe379bc575f58c3bc39eb40a021bfda20577a8c38d433cbde93df831f30cd82e0d0548cb01c7ceed694c120cce7eece4dd435fd329cfadae15f983ad8ec2531d2f2bed271f0b512c34206b408ff219e9d6b91a871b63abe4535ba7c4cfe9488803bc5ccaaf3d92154be551bd0223cf9e46d842110aa4ad758442e7d79b3ed97cba98b9ecd1e4c867fbcf19836f83d3a083dcab7fe23a4b9762ed200f2812f5dbb7907f33eaf148f1fd1cacf5629ee2873fa5dcefa0bffa963cd6c23a62f032594c5c59f58cc2f57ed99cc25e8377b00a2511f47bd85df7e7a15b832c5d411a5de7d86774db014e93cbf521798ab19d83b7050705f76b916cb09a09378395e74df299536f5aa146303f3dbaf541a63e71656f00c778cdaf41551b6c25e2225bf94421922af6f3041dbde4ed4709e271affd4c8d6b12be56c0332eaa138b1a5ca7cb3606a533d0bd50d37b425f5cc16b210fd0980e339376c699804904e3cd4860753c68403eb721325423c9ff25a1f8d55a868256a7cc039f47922b42b882cbfe1d629ae800c64ac80b94148453258ff04abcea95afcdb922aa515da76873d543cfc58bc582b6dbc7d308fd6d0cde3eb7ef19d4d53284f75e4a37447a70c2819b1dabd7020bd38b7d766bdaf6a695e80f008d91a84e5eb09f12517aec03bc4e97a928c7ab203e015a0fe291a3b03271ea73a22c5bff81e289ba80d5e7dd6dc6c11b7bfce32797b30996c86df3f5a85d508d015d2b70f8c389ec774e62b4266a7735431cae8c873c1cb82ed2c18fb9cd126de46096198a1f1dc2a49a8d23a338286233ed72e57b5e95e65e3fc891cc6e95a1fd6ebaa1e817730a22259ab4f8fe2958ab961e03bfdf4a654d8a4b20d17f4dd82e0ff5837b650a705c65cd0bfdd005daa351841e76b97ceb69aef9b1a56799416d35b4a7be7460c19f41a346a642bf1c37e409a0f0f9ed531591dd99725dabfcda4ca7392e9b2f137addcd46556632744bd47402c4aa33339bf4469e3060c8736fccd1a6b9490fc05e33663580029297ba6a639d06c6ac5e2bd4da6fd75cd2745498b9d56bc564372ff1c9c6b60e398ae2e6075d4883dfa657863876bff50666e85bad93123defe058f2d0e4280199ace706d9ee7667ad16bed5c1da74309f9939cef50c846edd783b5b30029a07b4ead5593ba7681deb12f42e153ec126ff2d7939e4de86d80f2fef95b35e791a513ef55cc95bf81846b0b5176740e36a639869631edba2f13455c1637c6d7cdac37f7a58f6e8878912ef5d936fbf7daddd42681e74427536ec9b958d2a140e5d32df48027995550f57ec13feae74b1c7428fb43617ad17c7837d9c1a85aae1d2d2e8652a8b5e5a60ff52dd79f37f4f2ab0c8f6928c401663f1d56eeeacd95a3e7e3b0e57dda7f18154a3d4d2968bb5704d5f82500a314639710dabd33d4e451b1ca7f02a1b60a133987d349cfea7f56ded435fb8188c4496ce16ead2070af85b12b23dfa67711e9fa45bbb5f9976cc2712174e9f45389f1589fe819ae97e291bd9c850d4ef230dde6eb009ef1b6284847b57073158cd89f1d87be8dbfb830582326b1a5c617c91807ec79de39b6bbbc997628c10ddb22f71f4cdff27db9dbb6aafa6a507ef9607cfa9532882e3263a8f38a7e000628107a55bc789dac712e79610013fdaf3ff910b1d4adb5e1ef67293ff204e02b461acd8098a01aea39772db1fee25c249c77c622cc107e73b671a2fbaf0f86abdf6c364d15bb89a75f15f44f5542a8ab0f2f9834f5b7468904240f37fdb70c30f8c1c5242f3f578193cde649c75439bf10b2b339c869f897cbfabf117f6e4a7534a0bd047135b01e3440e37d22927d3cadd2677da6a0b3160376bc0ce827f1fa110ca2e5ff29f118519796ececc81b22c5bff4b63b5d36c0ab0db0b802e510aba5af872159ea1d3a5c160be0f6e4d0e8ea14169983ff21152bb780bf92ac6c7ef83aa8170d7ca6ec7b37d55767e6965ff4429dc98a393c1024fce4af3d9759a0463f4e537e4be58958d3def7a1e011ba7daaef2b84ff59f198849d6b3994b14b98ad7a02b0ce09ebc9800d3d2f47d076ebc79e388ce9178ff9701d663795134adfcc8a0b7ee247454a831ddaf2549ef53358fe6543eef2849e3af2c976d72aecd2639e62ed4d8ae7c9e9f73d2c7ddfa58649b644e56e293fccaf410f440bb5b3918c2aea128a115245e927ee98d117005bdab0b23249d5e71227ebef0d8cba413d131285d4948b80aba75da0bdcda5cb792922ed234d525ad4a99c6be411c9be3629570491f9910ba5fdbe7a380487c7b6b9e90ff5a2ba07b9b3f5e016f26559ad3381f808301f91c5b068abe37152e390e235eed2c2753e593ea8f6cb50dae9e9e59b3db1a4e7d4f2b6ba81354be64cd1242539531c3d9cb2a01a946715f59e931cc876ea12be1121f1a8c41ddf5bc915b1b5677c8e07bfa785198365f154ac99e2e7ea187e67d16aaf1a18d188130cab5bc7203e07117aa8f376a858f35bc706adadbadde09b63b3189bf3dc738669e6e3147210a32e794ff329ea410da925bf53ca4fe4005862b6fa6040f1a02f522b57aff7fa90fdc7c4e8e4d7fd1e7cf76c9228c56ebbf134fd07774132b538c971d648073d1b1e8fa5bbdf5b58c9fd9e8c3f4d512c7bcfe527bbf264c01ed1d971ea621f6d89905c05640f3ee9827abc6773bd5b44a5c1ef479c311872932e132c15b12798bb47230882bc51d3d46b64ef33c83418c4dbc7d5ef2a95bfe6739fa9dd9cd69ae86593e1a36ebd6746f68bfb59457f2471579ab2be80117838fddfb2a9b54b750c28eac9a2b03a71895e5304bec8c2e3237b83f77cdd8169fb5149ee36ac7224548e8cce4f5f58af2b295a4bf9ae456c2491694d86ea18886aaed871f5d931b937d234e85184d4888ebf1f1760e6c541198ef7f95c305832128394ed5e8b5638fc8f51d3d36198d605ea0f1eb6632dda42d6484be2c2d72c9c14b04f6af76bb46040906ef0d0ed185ca20a2d0f393555c703e8799cf80cd9376f83e8438333bf56ba9b9569ca376f75d162669cd475a97fdcd5452d52a70f0082d6971826efa4198dd316338c3ea52dd56b273e9a86bc243cf3cb6623791e799fe58e1220eb826a1faf70725b0fa788a5a9c800e12ecf2cf30b919f1da6c2ef0dac44e4683a22df78104da89f9703de92aa1333a1bd7c959eed9a324d93acc46dee3539ac9b855861d4c19f72a9d244e53a2f89735e170c28814289d094a49577fa7f71330262aac0440a671b512d7e0841f4396bc3447848f4259015a2b3e358d5d0ccc7625348d935"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffe0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs/custom0\x00', 0x800, 0x0) fstatfs(r0, &(0x7f0000001200)=""/138) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000012c0)={0x0, 0x1, 0x4}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000001300)=0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000001340)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001380)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0), 0x202000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001400)={0x73622a85, 0x3, 0x3}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x5) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xfc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c884}, 0x20040000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), r3) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xc8, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5d3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) 17:19:02 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/ptp', 0x100, 0x2) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "b728ecc69edd605f", "5b62683cbfc8f3455d31c7d76151e438", "1c53cadf", "b9494cb76530aaf5"}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socketpair(0x11, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) write$cgroup_type(r2, &(0x7f00000004c0), 0x9) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x38}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x18002c00}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd4, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x21}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xdbb}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004854}, 0x40) 17:19:02 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10803}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x802908}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9efe93f7dd93a69401df67ecd9d9be727ee1f3e254917baf4716dadbdbe3eec0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x20000000) 17:19:02 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/67, &(0x7f0000000480)=0x43) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) 17:19:02 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3d7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044115}, 0x0) socketpair(0xf, 0x3, 0x5, &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x81) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='batadv\x00', 0x0, r2) write$cgroup_type(r0, &(0x7f0000000480), 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40941) sendmsg$AUDIT_USER(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "51db9a60145b421bc981d9e9652819cff6528a2adf379cb59d4fe433c0aa2ed43da62c5c92cde71676f9df601f1857db2c93aa736a61083a91d5572e16015d5d9accaf434badb358fcd952de7ec747c977670cecfbcd1b3088485f451a3c59fd5a9d05cc5844", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x4008845}, 0x40000c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e9ee34b16cb4"}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe96}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8a7d7a95}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x24008045) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) 17:19:02 executing program 6: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001180)={0x64, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd, @fd, @fda={0x66646185, 0x6, 0x1, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @increfs], 0x1000, 0x0, &(0x7f0000000180)="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"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffe0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs/custom0\x00', 0x800, 0x0) fstatfs(r0, &(0x7f0000001200)=""/138) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000012c0)={0x0, 0x1, 0x4}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000001300)=0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000001340)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001380)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0), 0x202000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001400)={0x73622a85, 0x3, 0x3}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x5) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xfc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c884}, 0x20040000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), r3) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xc8, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5d3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) 17:19:02 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/ptp', 0x100, 0x2) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "b728ecc69edd605f", "5b62683cbfc8f3455d31c7d76151e438", "1c53cadf", "b9494cb76530aaf5"}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socketpair(0x11, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) write$cgroup_type(r2, &(0x7f00000004c0), 0x9) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x38}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17:19:02 executing program 0: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40406) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r1 = socket(0x11, 0x5, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xce, 0x4, 0xf51}}}, [""]}, 0x30}}, 0x80cc) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0x3, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4e95}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x76}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf633}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb9a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x499a287ff454fd05) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x97}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x12000200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x8, 0x8e68, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x93de7156e216483c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x21}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) io_uring_setup(0x5c8d, &(0x7f0000000c00)={0x0, 0x9caf, 0x8, 0x0, 0x17e, 0x0, r6}) pipe2(&(0x7f0000000c80), 0x800) 17:19:02 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240000d4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1c000}, 0x4000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8084) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf23}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54113934}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x448c4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0xef7eea577eb50afb, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xee15}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008800) r3 = socket(0x23, 0x3, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r5 = socket(0x15, 0xa, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r2, 0x713, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000d40)=@get={0x1, &(0x7f0000000c40)=""/238, 0x1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e80), 0x20000, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000f00)=@add_del={0x2, &(0x7f0000000ec0)='xfrm0\x00'}) 17:19:02 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10803}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x802908}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9efe93f7dd93a69401df67ecd9d9be727ee1f3e254917baf4716dadbdbe3eec0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:19:02 executing program 1: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x48011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x20}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48090) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0000}, 0x20000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/meminfo\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7d}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:19:02 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/ptp', 0x100, 0x2) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "b728ecc69edd605f", "5b62683cbfc8f3455d31c7d76151e438", "1c53cadf", "b9494cb76530aaf5"}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socketpair(0x11, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) write$cgroup_type(r2, &(0x7f00000004c0), 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) 17:19:02 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x0, 0x2c, 0x0, "1c7b7bc9b3b97e2f8fb24f493de64db9612bd99a3424421ce6cbc2bc95951c701bc4c45c27859c04b6eff282e2312d6072424cf37977343d2463b5e822538b0725fbf960e8af244f5bf2f01f56f36749"}, 0xd8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x211ad0db14270a85, 0x1, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x800) socketpair(0xb, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "b4b0b0c3cd8569d7", "49009f969f57ff6a93ea6ca8f2a641b7", '\v\roJ', "a22ecb2650cadbfc"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "80d62eb0763d309f", "0c89ce055356bb8c3547ed0a8ef2414359bd49cd63cb16f3d10d733b0c4d919b", "caf5b84f", "5deb09b46e538741"}, 0x38) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'wlan0\x00', {}, 0x9}) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) 17:19:02 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3d7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044115}, 0x0) socketpair(0xf, 0x3, 0x5, &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x81) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='batadv\x00', 0x0, r2) write$cgroup_type(r0, &(0x7f0000000480), 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40941) sendmsg$AUDIT_USER(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "51db9a60145b421bc981d9e9652819cff6528a2adf379cb59d4fe433c0aa2ed43da62c5c92cde71676f9df601f1857db2c93aa736a61083a91d5572e16015d5d9accaf434badb358fcd952de7ec747c977670cecfbcd1b3088485f451a3c59fd5a9d05cc5844", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x4008845}, 0x40000c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e9ee34b16cb4"}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe96}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8a7d7a95}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000090) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) 17:19:02 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x1c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10803}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x802908}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9efe93f7dd93a69401df67ecd9d9be727ee1f3e254917baf4716dadbdbe3eec0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4881) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) VM DIAGNOSIS: 17:19:01 Registers: info registers vcpu 0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ac763e2a40 CR3=00000000177da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 000c016c6c6f502e 726567616e614d0c YMM02=0000000000000000 0000000000000000 5f5043545f54554f 454d49545f525454 YMM03=0000000000000000 0000000000000000 7830202c7d5d7d66 6666666666666678 YMM04=0000000000000000 0000000000000000 414e455f5245444e 4942246c74636f69 YMM05=0000000000000000 0000000000000000 2c3578307b3d4c54 545f545341434d5f YMM06=0000000000000000 0000000000000000 40202c7d5d7d3138 7830202c38783020 YMM07=0000000000000000 0000000000000000 49545f525454415f 444d435f53565049 YMM08=0000000000000000 0000000000000000 307b3d4e49465f50 43545f54554f454d YMM09=0000000000000000 0000000000000000 6666666666783020 2c357830202c3878 YMM10=0000000000000000 0000000000000000 30202c7d38637830 202c7d5d7d666666 YMM11=0000000000000000 0000000000000000 7830202c30783020 2c307830202c3178 YMM12=0000000000000000 0000000000000000 0a2930397830202c 7d30343030303034 YMM13=0000000000000000 0000000000000000 000000c000559d40 000000c000566600 YMM14=0000000000000000 0000000000000000 000000c000559dc0 000000c000559d60 YMM15=0000000000000000 0000000000000000 000000c000559e40 000000c000559e00 info registers vcpu 1 RAX=ffff888018259ac0 RBX=ffffc9000e7b7c40 RCX=ffffffff817bd091 RDX=1ffff1100304b358 RSI=0000000000000008 RDI=ffff888018259ac0 RBP=dffffc0000000000 RSP=ffff88800f3a7aa0 R8 =0000000000000000 R9 =ffff888018259ac7 R10=ffffed100304b358 R11=0000000000000001 R12=ffffc9000e7b7ff9 R13=ffff888018259ac0 R14=0000000000000000 R15=0000000000000086 RIP=ffffffff817bd39a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557368400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe425771f30 CR3=000000000d38c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 1cdd5f6f9adf4fb2 8544198406187912 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 0000000000123158 YMM04=0000000000000000 0000000000000000 d723ac22577e40b7 000000000013d300 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 86bc143bc12d01f0 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000