Warning: Permanently added '[localhost]:43205' (ECDSA) to the list of known hosts. 2023/02/26 18:01:45 fuzzer started 2023/02/26 18:01:45 dialing manager at localhost:41417 syzkaller login: [ 45.601309] cgroup: Unknown subsys name 'net' [ 45.665474] cgroup: Unknown subsys name 'rlimit' 2023/02/26 18:01:59 syscalls: 201 2023/02/26 18:01:59 code coverage: enabled 2023/02/26 18:01:59 comparison tracing: enabled 2023/02/26 18:01:59 extra coverage: enabled 2023/02/26 18:01:59 setuid sandbox: enabled 2023/02/26 18:01:59 namespace sandbox: enabled 2023/02/26 18:01:59 Android sandbox: enabled 2023/02/26 18:01:59 fault injection: enabled 2023/02/26 18:01:59 leak checking: enabled 2023/02/26 18:01:59 net packet injection: enabled 2023/02/26 18:01:59 net device setup: enabled 2023/02/26 18:01:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/26 18:01:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/26 18:01:59 USB emulation: enabled 2023/02/26 18:01:59 hci packet injection: enabled 2023/02/26 18:01:59 wifi device emulation: enabled 2023/02/26 18:01:59 802.15.4 emulation: enabled 2023/02/26 18:01:59 fetching corpus: 0, signal 0/0 (executing program) 2023/02/26 18:02:01 starting 8 fuzzer processes 18:02:01 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xa000}, 0x4000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x4004000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x20000041) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r6) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x60004011) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r6) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r8, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r9, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x8800) 18:02:01 executing program 0: ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x8000) r3 = inotify_init() getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}], [{@obj_role={'obj_role', 0x3d, '{'}}, {@uid_gt={'uid>', r4}}]}}) clone3(&(0x7f0000000440)={0x10000000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x8}, &(0x7f0000000380)=""/16, 0x10, &(0x7f00000003c0)=""/23, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58) r6 = pidfd_getfd(r5, r1, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000004c0), 0xb3, 0x20100) write$snapshot(r7, &(0x7f0000000500)="662f455af57b4704b014635849a6b19168a14657c3ac716b1f081b65f813adb97a485ac31d1e2a55f61d419cc3ee5972c9fabeac8684ccc19db530d806719dca148d85b18f38bf8d221f74f4278f1c40bd55ebc900e1bbd08927d5daccdfe2720591ee29c4e1ee60ebd326", 0x6b) r8 = perf_event_open$cgroup(&(0x7f00000005c0)={0x4, 0x80, 0x1, 0x81, 0xbf, 0x34, 0x0, 0x7, 0x9000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc8, 0x0, @perf_bp={&(0x7f0000000580)}, 0x10000, 0x4, 0xfc000000, 0x8, 0x4, 0x9, 0x0, 0x0, 0xb74d, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000640)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000680)={0x0, @initdev, @multicast2}, &(0x7f00000006c0)=0xc) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r8) r9 = openat$cgroup_ro(r7, &(0x7f0000000700)='devices.list\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000000740)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000780)={0x0, @remote, @empty}, &(0x7f00000007c0)=0xc) 18:02:01 executing program 2: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x26) io_setup(0x3f, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xa9dc, r0, &(0x7f00000000c0)="e4b3df297ce44d215598b468c2efdb5996a1faa5e4e40cfc0440b2e89c6c34c0ec89bb7664f2039b842594152c0cc9099a9555c6e21a53ab4cca74e9767bc4ada3f9b117cb149eed6b67cea088283e0182a6e24eacb74a8231f7a90411612b3b23ff8c5d7f3e73c29d386c4ff1030e", 0x6f, 0x81, 0x0, 0x1}, &(0x7f0000000180)) r2 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x2200020a) inotify_rm_watch(r0, r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8001}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5a}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x30}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8001}, 0x20044044) pselect6(0x40, &(0x7f0000000500)={0xd65, 0x7, 0x4, 0x9, 0xdad, 0x6, 0x4, 0x437a}, &(0x7f0000000540)={0x0, 0x6, 0x1, 0xb7, 0xfff, 0xfffffffffffffff9, 0x1, 0x1}, &(0x7f0000000580)={0xfffffffffffff001, 0x3f, 0x7, 0x7, 0x5, 0x2, 0x100000001, 0x9}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x4d4c]}, 0x8}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x18}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x1) r8 = inotify_init() inotify_rm_watch(r8, r2) 18:02:01 executing program 3: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='}\x00') r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x81, 0x6, 0xff, 0x3c, 0x0, 0x5, 0x2220, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1800, 0x7f, 0x6, 0x7, 0xffffffffffff9a9a, 0x7b, 0x5, 0x0, 0x80000000, 0x0, 0x1ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0xffff, 0x100, {{0x1b, 0x4, 0x3, 0x5, 0x6c, 0x65, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @remote, {[@lsrr={0x83, 0xb, 0x24, [@empty, @multicast1]}, @ssrr={0x89, 0x7, 0xca, [@dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x44, 0xe2, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@private=0xa010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@rand_addr=0x64010100, 0x3}, {@multicast2, 0xab76}, {@multicast2, 0x80000001}, {@multicast2, 0xa6a}, {@local, 0x72000000}]}]}}}}}) inotify_init1(0x80000) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x60000) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x5, 0x3, 0xff, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380)}, 0x120, 0x7fffffff, 0xe4, 0x7, 0xffffffffffff1ac6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xffffffff) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000440)=""/229, &(0x7f0000000540)=0xe5) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x80, 0x8, 0x2, 0x3f, 0x3, 0x0, 0x100000001, 0x40021, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x100, 0x9, 0x1a0e, 0x7, 0x9, 0x7fff, 0xdcfc, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x9) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x1010, r5, 0xcc7) r6 = perf_event_open$cgroup(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x5, 0x0, 0x7, 0x0, 0x6, 0x80000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x2000, 0xec, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x7, 0x0, 0xffffffff}, r1, 0x8, r5, 0x2) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x9) 18:02:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="e2274677160c2df7999e7a3996f1aa6489eb58e3f3df18f2cc98e62ca7551c8a9b6044b51ec151267ec8e80a62cc789b4ad04d19f5c05deb9c2e2937dd56070e51df136778efa0bc051071e1980de0d5376ca629d84ed7f9544ed28a27560e72c91320ce19a2eec2383526b5b33b6335c183099ce3e4847e8da7ca05b2dfdf7fa611", 0x82, 0x1f}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x400, r1, &(0x7f00000001c0)="974d3dc82f719ae2445ad7284675f92e306bea8e4109cd003a0f9f6c4be202c69bcb7d04b894d7eb7511561c20645640f8d965bc7d86950cb9b0e8b7bad4c085083777e882508989a07f8c8a22bc18b4e52c0a409166768273c6106d35", 0x5d, 0x300000000000000}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000280)="4d4aef1911975adcee9303dc8c0087840280bf7860f2e5869bee57bb81dbf268ca7b0b4fa8872352615516e59546cdf5faebd531317e72321800b129496f7ffdff50504eaf2131c5364103ee429f5422a9e7c42793c596f6de9bb1409378ec847e8e629cbafa4f6a7f880a8aee5772ff4a30bc34db30d3a0d0693c69c153eba923e44ee1d0b7793eec1c2e1993ef9f8003e94686a9c1c01c06de5252d173d29cf56252be39adf907435f12102c664babc4ec432919afd1bc45155f3e662ab8ca56c4456a9b2b9a9bf2c8696dd87a4e09a2d49b7a5b53d44dc3fd1ef10432ea446151c8d7600edf63444d67be75f1277e84b9", 0xf2, 0x6}]) r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'gre0\x00', r3, 0x80, 0x80, 0x1, 0xfffffffe, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x64, 0x0, 0xe8, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x83, 0x7, "865572e3fb"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', r4, 0x87, 0x7800, 0xe83e, 0x7ff, {{0x1c, 0x4, 0x3, 0x20, 0x70, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x28, 0xda, 0x0, 0xe, [0x3, 0x0, 0x2, 0x400000, 0xfae, 0x80000000, 0xad, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x34, 0x51, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xac}, {@local, 0x2}, {@multicast2, 0x7fff}, {@multicast1}]}]}}}}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000600)=',)/}@,\x00') recvfrom$packet(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2042, &(0x7f0000001640)={0x11, 0xe2, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) accept$packet(r2, 0x0, &(0x7f0000001680)) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000016c0)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000017c0)={'erspan0\x00', &(0x7f0000001700)={'syztnl1\x00', r5, 0x10, 0x7, 0x1, 0x7fffffff, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x64, 0x0, 0xff, 0x29, 0x0, @private=0xa010101, @loopback, {[@noop, @noop, @rr={0x7, 0xb, 0xfc, [@dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0x17, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @broadcast, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0x39, 0x3, 0x8, [{@loopback, 0xfefd}, {@loopback, 0x20}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @generic={0x86, 0x3, '<'}, @timestamp={0x44, 0x10, 0x20, 0x0, 0xb, [0x3ff, 0x88, 0x0]}, @end]}}}}}) connect$packet(r1, &(0x7f0000001800)={0x11, 0x17, r6, 0x1, 0xf7, 0x6, @random="d99fca024b13"}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001840)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) socketpair(0x29, 0x4, 0x2, &(0x7f0000001880)={0xffffffffffffffff}) r8 = perf_event_open$cgroup(&(0x7f00000018c0)={0x5, 0x80, 0x41, 0x3, 0x1, 0x5, 0x0, 0x2, 0xa011, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_config_ext={0x0, 0xe23}, 0x590a0, 0xffff, 0x6, 0x6, 0x10001, 0x3, 0xff, 0x0, 0x40, 0x0, 0xe52}, r1, 0x8, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r1) r9 = accept$packet(r7, 0x0, &(0x7f0000001940)) recvfrom$packet(r9, &(0x7f0000001980)=""/221, 0xdd, 0x20, 0x0, 0x0) [ 59.733921] audit: type=1400 audit(1677434521.213:6): avc: denied { execmem } for pid=262 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:02:01 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x500c0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff, 0x64ef, 0xfffffffb, 0x0, 0x3ff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x100) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000180)={0x3, 0x100, 0x400, 0x1, 0xb94b, 0x6f}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x3, 0x5, {{0x8, 0x4, 0x3, 0x13, 0x20, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x1, 0xfffffffc, 0xff, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@empty, 0x4}]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x1, [{@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000240)=""/2, 0x2, 0x40000020, &(0x7f0000000340)={0x11, 0x7, r1, 0x1, 0x1, 0x6, @random="1f1cb37b36dd"}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404c010) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5) syz_emit_ethernet(0x62, &(0x7f0000000480)={@empty, @empty, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, 't]', "a13492", 0x200, "c585764bb0892240161ae7d41cd45e005026ead86252b39d532f2ba91bae961fe8340c46897a88962c7185e8c747a1cf69fd44662715c98aa0686c6858ee8f43f73285b0c7257b37128f0b"}}}}}, &(0x7f0000000500)={0x0, 0x2, [0xc6d, 0x67b, 0x7a5, 0x109]}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x48009}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x58}}, 0x8880) getpgid(0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 18:02:01 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r3 = pidfd_getfd(r0, r1, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r5 = gettid() clone3(&(0x7f0000000500)={0x22208000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x13}, &(0x7f00000003c0)=""/140, 0x8c, &(0x7f0000000480)=""/10, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r0}}, 0x58) r7 = getpgrp(0x0) clone3(&(0x7f00000005c0)={0x20000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x41}, &(0x7f0000000240)=""/117, 0x75, &(0x7f00000002c0)=""/23, &(0x7f0000000580)=[r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7], 0x7, {r2}}, 0x58) r8 = fork() r9 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x6, 0x40, 0x20, 0x7f, 0x0, 0x6, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000640), 0x4}, 0x0, 0x7fe0, 0x200, 0x3, 0xffffffffe3bbe26a, 0x0, 0x4, 0x0, 0x8, 0x0, 0x8}, r8, 0xffffffffffffffff, r3, 0xb) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) r10 = pidfd_getfd(r3, r4, 0x0) process_madvise(r10, &(0x7f0000001ac0)=[{&(0x7f0000000700)="1442771420ac4f51a782baec3f71e85fd2db49bbb6ca41ec871d04", 0x1b}, {&(0x7f0000000740)="d003a413453b3e121fbbfe8d1a7a71170ff8b8624209d6018799a26e4e30bdcede4da6860dc232ae3ea8c83cb765c96df89c22652ab0534c14bdd3419dcb11e58b2d1b3d1e3c2537e2b33efe6074f756e5bae918bb7ef4f23da16eab524c734667c812be1b2ba95762aec856e5b56befb24f07039fd4af5fe52064d2e3bbab64f3cb06c384a5a2328759d787c6d73bc068980ea8577a0a6b53c2139a6bd495880717376ebb2d862ce2abce7d614fb252d98f329283776a83d5786511ae3b9ccf21e522221102a1847f9c9a864e07da82cf4216e00bc43edba09d6e063e8ca4ba543b", 0xe2}, {&(0x7f0000000840)="80543ff4b87fef1468af21435fb2dcd0f1c9403980f41f72526f8c43932cd0967b83b5a2cbc6bcd37f079544b5f920e4f1d2b37f5b482e3ef64bee9c53e668ace1613b6e2f14cd0a16eb42777990584ea7116e31c7ae30fee79b3dc3d619b659f288a0f15c30c6933259bd14111d7717c85a711d642196181d19cfd9dcca6919ca4c8625ec337c7c77cc1ee8dba1cfb82119156ca60f4ffc229a4cd7588d2b63fa39bbb4a6a6c6fdcdab9fdbcc5360de9cc4afec7c0ef1549558753552fa6cebd260ffd8ce831927754c9eee66c11b669cb1f7dd1c2b6f05f806ade75f7772d32042a8fa87bdc88712f98883c3f45dc04d8729f05157337ab0404a48520ad4a2c84645ceadc8c0f394391d76741bfb34a1e858929a4e41e7953711452ce747616386d5b9feaa8ab4f74db926122416f58485b9f405f2a0f238c904f13af946859e04475f47f33ee8958e0f9253f80090aae71033f2c1b4bf79be295e8cbb076d6e5460c0d84a681d3e59839c95b1637110bcc98c787934fdee142ac0b82562b255da7a2c1bf23b11893529c7923e0c72efcbd41fc75a82ac3946ab6b8f62af91ead057be34e3c7b5c58f93e9fabeb7dbb7464d7888e843920eb336ccf70a719d03d3a6622b7b6e664bec3d2f1f6bb6ebe0c49da1477ad5659bbcb3670024dd460ff414a5a673112571e7b8fcef621747828028c95e5aa0843377ed548a86780363800e83c8d81d0ab570a9e257fa624ead339908e1473494891c4034aee2d629bbcecb036017b0919ae711a177be6abecce65b4e1f0f59c650c76f9e48353618970905568f8b40a8ccbb9946081a050bc379a5e5ce4e31ca8c50e24a8a883081e5eadcc9b2e2d61c6f9b028911698cf936ae8de0b5f7bdbb8cca9d17c96647dff5c55f9552354db4058459e0b9d8095485095ad6754a31315c77d27daefaeaeed42b390434956598987cbe24fbe7b057a358011f6c65e1ae5003536903b018a9635737aaa94e7c75ecccc747ea6e213af874f10b83c1948c7f1ac619f98884803867ea89d5c4f64d32b9a58e08cfdcfe602560bbb4f66f34bfbebf11891ac611803e34cf6f25576e2fd253b9a7eb6415c7126d8b92ba2cb3632ba6fcddc4e634afac0c678bfa6faae0270aa7f5c94973dbb2ace72fd01da89847cf7119ea928b0174e1e30be7976bbfd94a3393a6f584a0c1f956aec206f0e91704eb51dcbdcd51084852ae8e42c604a9c7566586bdd1693e7c7617f4ca6b5480e12e7058caef800b688b8b3facb50845f1af3bdf5bcc64aeba6488f327857e097593da005da859cd69a2c9b332c6c06b0a2575af8b95d5e45e2cc5e854df57c1da4ae003541fab0318da69d5821f08d4a0e81a672228652de4b024de4c6b8a168c7f6d4d21771473a10dfebfd31dc1a9e2585806fa744c0c86b2e457703094dd2534f1b761c7cfb8e3959e7bab34c352a8b9d041f67e58ceb6bcb7b3b76621659f4ac3198868e96e759806002078a0a05bc56793afc7f94c4d54e161600b67948f0bccd2105867ef58535b41f58e8f5144bed43031140b2a3d3f3dab6ccae3ac2dd5ba0ca95804af45c12fcccdbc6192f95be6b32b6a01ea102a9ae222cbe245de75393baf79a03541dc8ec7866553662258ecda1796d6db59889be406fd7c78e439e472f7f3d5690549f0c89bf44117507eaedf0b2122feb237f0fb7ebf17a3b695aea530707fb2ad110f9b05c47a594aebb36cfd8bcd38e4ced226900feaa5eb694e624617eec5c236e5719252efe3f7465876a1a7806f4916582ff030959426905243f4cfa08610bb474af008ac5201211ca10f051fd1d74ffb7f2afc3816bcab69e8eb5ad58f78600b3429a333e8ad89b8e55381dcda7af9599a8ca09366ba544eec14e72ee3d62218d8af92c50d2297dba9d1707ec8aa0d49ca75b54c4e63ced99a41b25340f9ad65951a9b9c3666d5c01e21716b713ad77b5c8030e7078ed71fcce7da170d529c250a8d03f3edecd43e82af8b2c4c1d71acab701eac22d83b437f66180bb7bf64703250c5d6c6ab77dfdaf698b4cec0b30cf6b9840b4503a25b6cad5d296a5161c532c18269defa1b1b6c779aaefb29c505d9075a445b88ba447e5c7d9636c36f0e7edc9955dc542748aa2eabc6a8294a2a0cf7115c6577d146b61efb74ea1113ca8af6b19c9fb99b40ded8cab3feb2d6a39c2947ca869de12570c0ba0838ab41247e9f32d0d8ffd6138c105187ba409d3e589fb4babf681ad6da5c68f47ee878b82db84e4975be135b496160f4b595bb798908436fea41144f3d70a028615e4888f4ff3908f408330fd01999810afdb1601cfc3b013c802aee49870adfe10941d89bd420d142cdf66ace93e127646234fd8515f49782f9b8a64edb167a849f78b2a239006ff0e1ac6b7593714248f7fd10dcfd3372049c65838933fa47fa90ef80d9b31b1705a0ea5586d7ae473a94ec44e8fea4c847533457cbe517cff0d7b78d8b3e5ac167b475955b153359f0bf5e54147b58113a15399a409e0414cbf21913c6013828ace326b151d740fa2721010f484a0d5452346841704f587c610fc172a960a3a11572514e22fb8ef2ec077d68b58d8ad7bc414e395aa4fe164af0250ed1ab8f98b106c1917881ddd73e9540a7a95d4ee3700611574f1801e60570dd056a92b496700c5db55e42907100b159c8b3f03750c4a0721cfa2aee29f96a08e58abf2f24afc5390f41cb64e559da63dc653b67868b971be27fb6c2c4fe877a0cac17da01ba1ad46178bf5adf2591e9432857864fd2bfba46ad27e6b13cf55c932b789a6ad9d95c84a5fa9f6c82d10b4b000a9a22a5dcc0b63d61eebc9ad6baf6d1ebf291b41b92b606561164ec628462fda9eb7c99a2f7f4fb7420eb18552f91a4da521fbcb2f51490d853d2d57ffe10cd4a0c7e2c4e3e925eae01ab4b88e734d0cbb3eb4e6d50d4b80afe53a627159b7904a5fe29cfb6d0ab9f92c5b65c15fc444ee3662ce48af967056aa73f951b3205e307f40f834c77b073f6c8e8525fca9e5af9ee9c0c46ef301accff99db14792eb25c3b335231ce76194bc91d42d6d867e6c1104f9bb3fe2d4bb2a96996a961843e79ef8dc99b146ca9bfe2cdd1929095b385dc459ff36443dfaa775ab9000314f087c543ce6a11d218e8bc3d6e1add43615f7a5706ce8a5f47a8f1aeed5679906779d6ea03c7a50bafd98075c4a9a72020dbddef9c478e4a1e88531eced4400bc583758a6dc2e1921dd195046515269bfe19dc5d450e6c876db768e216660c8ed84d56bb22357e478b204d62c4ffd8c3e862111f16a4c5690cf63b4037cccf337593fa3f82c41cb9d0daee2b5db4a0dad3c50cb39e6511e5dff8828414b029789c5f1d7b667ecb986c1a369959a9e1333e0cb4d835349e4ef16d1de9ea61a714abae4b23054db73f88972d0f5b4ebdd9d15371ad85a154ca050b38d09baa8b66f2bd7d519ed40ea22c61fd9a8fa57b0c13d62bf54e5b13964a81fe770d793bede496f6e357f6437c45c6b0e838be6b95c986f8d2a184c953628ae96d9736cdce7bb1241bc922c9b54e70a25bb7d2e138c08b289b241309706f95335bd8a10fe387a767750b7ec6450ce387da98db8157e6c73d8f5fcf3ba0edfcf626eda83d7d224deb9b188cbc946e1ef35e3fa991842842262f17a6db79e7f7a21f6e1000e25e0b08eedfcde22658c89112fa2e9ebb25064716d139cb72ca34c651afbfb24ac64f5eafaa92618605ca11d8b4a65503cabb1ccf717a0fa3eb3eefb6986a772c40bc380316c8934c4f9db9a6d11f3272c897fdb973d905c13ddb3d5524f6c7c17ed07d4164554cf35ccbc194e597eed94958ea62db983c130dd3a192b5c2aa5e1408e6ae42c50c868c126950d6d81796e7d233022947265d4845608cfcb2ed1df204ba4a046ffbe29e2ba82b446f9eb3908b01bfcfc7501567f7da390518571fb2af18f2373980b330526205ee6936c36864ed07686fc2a6f0843e40db9cef71dfac0a0cf970a15489a93a6441cbeb9edd9ca4f26aa2ec033d60cce0b5b839f8fdff2d2af7bdb28b53676d66c9153021be3cfba4366e1800afabe75fe63b3a633e9a91b5d9b2cce84460392b66d55bb064a2ada3bd171ace3d6ead273ec0342d5021763e05f0c29bc439a1b4b6702e5f8e52db4fa7dc319f438bddf172a052a705c3d67f7e8f92d69b2c069a09c5d09a878b831ca7763b2becdf4fd6450e108b3966d450e0a730a82e436dfb3c96f5e96ac8e01ce3e014fdf4a9fc54b17eedc34433f5384fe086aef57654bbdaba8bbf7064b23feb583a01edd7fb43d5cfd690710edc9f94dd6a7d77659169df80256bf6dea5674e4acfca342fc96f7e2a571a5a5e4744fdabec076da06c77ff4632b8f8d77eac90c2c403de7217d29b0e9a664f01b86e1533583b73e0bb84b396f1f983269a523e012e222086c34608d8f8b8c826b10622fcb325e43785803b6892202b7c2af0841453b9e53a8726d4a3537dfd4f3ec53079ac89ed30cdecd1cf445d7077508ee5e069a992665810c5b6538d6b9640ba1c89038a68d49ed81f105c77ad4dd9a7b949025d0b627db65abc1096eae53a2eae08fc41f5feb8047c9a11db46553546cbef4b1be71df90566b3c236a5a3cbf7e4762c649aad4fcd73e3f0b55a41ec681255a2c38a32cb79b1a17c0a90eea51695384c97ccaf6be0dbc4a91fe95c70b837d1f1775118f8472b89de3973dc8ce72c5ad15bdd9e7fa04796c03eed8d61718b2409354ccd2c6829ec6325bdb221821c8ca4632e869d5b4239c22af250c187356548c0324e19c19c0bb6a4a99c19d18bbeb45f74828bb1af3e9b611db52d1a76e5a3a3a92377601c2bd972cc368923612668dc621f9fc8f1c042311aa241a8681c7ce9e9b91183a50bc7425c9da1484c976bbd1100cd2126f6d712c9663a7628348ab3355034851359749a123f03b359863146be448ee38cb56c74399889f746c9d739afa326f6c4b1c862fcbd943a368d8a0f5489d2af769413518881f273d4161670ef789ec26dc58af67830c16af8a52b3eef90cdd53e823c0395140a4d8dd06338771c85b1efeb4fe385beac505f677a1fbabe1434dd2173490154f870c74158c605d9f2311f35590571e2c6b05211d3feaca1880723b4acd4896ff10dda568d923a2aca732b18ca3338cff05664a0e2bf25c4b8f841c276ac824f03671c5a89e98e3ef20adc0659f5c065fa2bc662ed1043169a77a74fe3d1494be21ae62629474e79f23ad68b279132d21057dcc057f0c9a53ec51996054b69f7f0df497ab98c43d446d6f91faea0387b6c5d73db5a6eeabbd06feda679a0173c3088c8ac3f1681456a6287df336ac4785eb971f253c46a7d8ff7c5090e38d94c4c791aa0361d76ad999766c9217ee7c83b0efcd7a07f458d50bed3c93d384452d77bb3fa0336a06c4727924e1927e8cf42b955891159372f20024b01c69638ba047840aa83623db4c47be7a05718eccd4cdde7f4a5f37355a6651510eab3465e4bd806f5d55d31781a3aa89fbf3cc22f86874527ed5941a60ba537d437b48fa8872728561733d81d0ce48220fbea890f3630c2eeb667870edf3aa09c45478321d6854fd0973ade707fc3630a74a1846acdfea68b8958ceecd5347499b519e2f45a46bc25808a3fe366dbd0d03aaee882c87b9efdd92e0fcf86f6159580cc566695e343167f0391611bed9ac61846d6a06091ae3089a236200e5c23c9104e0d0621c6d6eedb3d7e7b0034028d4b6bd67b949811865d471e44", 0x1000}, {&(0x7f0000001840)="3edbebe5223f6443878ad6cf7912641748644f7848053101e541c17b2f50d3ddffc353bf72c789822dc3c1fc5d25e5b31363c253cdf43b05cabad8ec0f643a0ffaf2df99de4020f3fe65946b1217142ba00662e308c9447e3233c4eefe4d59bce5a25550cc7c1357a9606476c757fa9186b8bc723cf8e78fa375d2f2ed51ea05f56afd3f827ffe711ab4bb407a", 0x8d}, {&(0x7f0000001900)="f9a1b72949d2299722ce44db6777a27710dffd117578a855331ec483985f004c3ecceee8d24bbfe69fe5a64ff7dca89d467cbcfeeceae5d628e7676d01d962fd6e8a413150925c453027c31a2cd8c23c7e986191b9ba46b7d877d71c295be5e84a5b43201d5dfd872ddfa5e3bc401a", 0x6f}, {&(0x7f0000001980)="b562c65bde12cb12a11c651ac8de3cde14665280b3409ef67491a0e9ff0a91e87c8ca8d0cdde41fcc207e692d8b2116987cb1d2c397bd6f12d3e8c55ebeec14c3d0fa0460fdb3ce8308585a7ca033179daa8d5ed3df7937daa22bcd0ebde68d94bb5bb837d3e8169d4313526dfa8d60d8b259385d29d6803979496c9a3fb581cf07676b438921305b287b668398b5d0e56cb8b5f66f3170d2710e7df550e5aade8167522d81f6c8000bcf6a22041374ca12c98fdbdd0438d606a8e3d96d583f25c9670f97315fed3bec35bdb5fc9993106cc351dadd38c8f6e", 0xd9}, {&(0x7f0000001a80)="7aff42b60d6208d6e22cdd6b063399ef3ccdb1201ccc5fb761d2413146c4f15dcf7e9e633d387b64192308b81e89499710ea06b6c1382a41f9dbecf9", 0x3c}], 0x7, 0x65, 0x0) r11 = perf_event_open$cgroup(&(0x7f0000001b80)={0x5, 0x80, 0x1, 0x9, 0x1, 0x1, 0x0, 0xfffffffffffeffff, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4b0b, 0x1, @perf_bp={&(0x7f0000001b40), 0x1}, 0x40180, 0x9, 0x1, 0x9, 0xffffffffffffff7f, 0x28c2, 0x3, 0x0, 0x6, 0x0, 0x7}, r1, 0x7, r9, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x7) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001c00)) 18:02:01 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) clone3(&(0x7f0000000600)={0x40000, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0x33}, &(0x7f0000000440)=""/115, 0x73, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x34}}, 0x2000c045) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x39}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x408c0}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xcd}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz1\x00', 0x1ff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555f}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x74}}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x380000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x4050) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40851) [ 61.007028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.009145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.010822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.011903] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.013226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.014291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.018496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.019964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.021786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.023955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.024855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.027256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.074308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.098870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.127223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.132528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.133228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.142553] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.143977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.153261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.161255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.163381] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.164934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.167193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.169614] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.170998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.176455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.180229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.181693] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.184085] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.185987] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.187356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.209197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.211399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.214881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.216610] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.218000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.272173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.277225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.289944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.294078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.295999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.084243] Bluetooth: hci1: command 0x0409 tx timeout [ 63.084269] Bluetooth: hci0: command 0x0409 tx timeout [ 63.147745] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 63.149270] [ 63.149405] ====================================================== [ 63.149825] WARNING: possible circular locking dependency detected [ 63.150237] 6.2.0-next-20230224 #1 Not tainted [ 63.150542] ------------------------------------------------------ [ 63.150953] syz-executor.5/277 is trying to acquire lock: [ 63.153334] ffff888018d10880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 63.155551] [ 63.155551] but task is already holding lock: [ 63.155967] ffff888018d10920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 63.156630] [ 63.156630] which lock already depends on the new lock. [ 63.156630] [ 63.157180] [ 63.157180] the existing dependency chain (in reverse order) is: [ 63.157659] [ 63.157659] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 63.158125] __mutex_lock+0x133/0x14a0 [ 63.158426] hci_cmd_sync_work+0x1e6/0x320 [ 63.158746] process_one_work+0xa0f/0x1790 [ 63.159069] worker_thread+0x63b/0x1260 [ 63.159376] kthread+0x2e9/0x3a0 [ 63.159639] ret_from_fork+0x2c/0x50 [ 63.159921] [ 63.159921] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 63.160464] __lock_acquire+0x2d56/0x6380 [ 63.160799] lock_acquire.part.0+0xea/0x320 [ 63.161133] __flush_work+0x109/0xd80 [ 63.161543] __cancel_work_timer+0x39c/0x4e0 [ 63.161988] hci_cmd_sync_clear+0x52/0x250 [ 63.162424] hci_unregister_dev+0xf9/0x410 [ 63.162870] vhci_release+0x80/0x100 [ 63.163271] __fput+0x263/0xa40 [ 63.163634] task_work_run+0x174/0x280 [ 63.164051] do_exit+0xad8/0x2800 [ 63.164436] do_group_exit+0xd4/0x2a0 [ 63.164850] __x64_sys_exit_group+0x3e/0x50 [ 63.165300] do_syscall_64+0x3f/0x90 [ 63.165693] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 63.166218] [ 63.166218] other info that might help us debug this: [ 63.166218] [ 63.166919] Possible unsafe locking scenario: [ 63.166919] [ 63.167449] CPU0 CPU1 [ 63.167862] ---- ---- [ 63.168273] lock(&hdev->cmd_sync_work_lock); [ 63.168713] lock((work_completion)(&hdev->cmd_sync_work)); [ 63.169358] lock(&hdev->cmd_sync_work_lock); [ 63.169823] lock((work_completion)(&hdev->cmd_sync_work)); [ 63.170221] [ 63.170221] *** DEADLOCK *** [ 63.170221] [ 63.170621] 1 lock held by syz-executor.5/277: [ 63.170922] #0: ffff888018d10920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 63.171596] [ 63.171596] stack backtrace: [ 63.171892] CPU: 0 PID: 277 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1 [ 63.172397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 63.172938] Call Trace: [ 63.173115] [ 63.173272] dump_stack_lvl+0x91/0xf0 [ 63.173535] check_noncircular+0x263/0x2e0 [ 63.173827] ? __pfx_check_noncircular+0x10/0x10 [ 63.174159] __lock_acquire+0x2d56/0x6380 [ 63.174449] ? lock_is_held_type+0x9f/0x120 [ 63.174749] ? __pfx___lock_acquire+0x10/0x10 [ 63.175059] ? __pfx_register_lock_class+0x10/0x10 [ 63.175398] ? __wait_for_common+0x394/0x550 [ 63.175703] ? __pfx_lock_release+0x10/0x10 [ 63.176001] lock_acquire.part.0+0xea/0x320 [ 63.176298] ? __flush_work+0xdd/0xd80 [ 63.176576] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 63.176921] ? __flush_work+0xdd/0xd80 [ 63.177205] ? rcu_read_lock_sched_held+0x42/0x80 [ 63.177541] ? trace_lock_acquire+0x170/0x1e0 [ 63.177867] ? __flush_work+0xdd/0xd80 [ 63.178152] ? lock_acquire+0x32/0xc0 [ 63.178416] ? __flush_work+0xdd/0xd80 [ 63.178685] __flush_work+0x109/0xd80 [ 63.178947] ? __flush_work+0xdd/0xd80 [ 63.179215] ? _raw_spin_unlock_irq+0x23/0x40 [ 63.179522] ? __pfx_mark_lock.part.0+0x10/0x10 [ 63.179842] ? __pfx___flush_work+0x10/0x10 [ 63.180137] ? lock_acquire.part.0+0xea/0x320 [ 63.180443] ? hci_cmd_sync_clear+0x45/0x250 [ 63.180752] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 63.181082] ? hci_cmd_sync_clear+0x45/0x250 [ 63.181377] ? rcu_read_lock_sched_held+0x42/0x80 [ 63.181698] ? trace_lock_acquire+0x170/0x1e0 [ 63.182007] ? lock_is_held_type+0x9f/0x120 [ 63.182301] ? mark_held_locks+0x9e/0xe0 [ 63.182577] __cancel_work_timer+0x39c/0x4e0 [ 63.182868] ? __pfx___cancel_work_timer+0x10/0x10 [ 63.183189] ? __cancel_work_timer+0x2aa/0x4e0 [ 63.183492] ? __pfx___cancel_work_timer+0x10/0x10 [ 63.183812] ? lock_release+0x1e3/0x710 [ 63.184088] ? __pfx_lock_release+0x10/0x10 [ 63.184377] ? do_raw_write_lock+0x11e/0x3b0 [ 63.184674] ? __pfx_vhci_release+0x10/0x10 [ 63.184963] hci_cmd_sync_clear+0x52/0x250 [ 63.185253] ? __pfx_vhci_release+0x10/0x10 [ 63.185542] hci_unregister_dev+0xf9/0x410 [ 63.185827] vhci_release+0x80/0x100 [ 63.186081] __fput+0x263/0xa40 [ 63.186308] task_work_run+0x174/0x280 [ 63.186575] ? __pfx_task_work_run+0x10/0x10 [ 63.186874] ? do_raw_spin_unlock+0x53/0x220 [ 63.187171] do_exit+0xad8/0x2800 [ 63.187423] ? lock_release+0x1e3/0x710 [ 63.187713] ? __pfx_lock_release+0x10/0x10 [ 63.188021] ? do_raw_spin_lock+0x125/0x270 [ 63.188322] ? __pfx_do_exit+0x10/0x10 [ 63.188606] do_group_exit+0xd4/0x2a0 [ 63.188884] __x64_sys_exit_group+0x3e/0x50 [ 63.189188] do_syscall_64+0x3f/0x90 [ 63.189455] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 63.189812] RIP: 0033:0x7f39a178eb19 [ 63.190073] Code: Unable to access opcode bytes at 0x7f39a178eaef. [ 63.190486] RSP: 002b:00007ffe9f796de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 63.191006] RAX: ffffffffffffffda RBX: 00007ffe9f7975c8 RCX: 00007f39a178eb19 [ 63.191483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 63.191969] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffe9f7975c8 [ 63.192451] R10: 0000000000000020 R11: 0000000000000246 R12: 00007f39a17e8233 [ 63.192946] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 63.193426] [ 63.211735] Bluetooth: hci7: command 0x0409 tx timeout [ 63.211824] Bluetooth: hci2: command 0x0409 tx timeout [ 63.275736] Bluetooth: hci6: command 0x0409 tx timeout [ 63.275776] Bluetooth: hci5: command 0x0409 tx timeout [ 63.339704] Bluetooth: hci4: command 0x0409 tx timeout [ 65.131760] Bluetooth: hci1: command 0x041b tx timeout [ 65.132729] Bluetooth: hci0: command 0x041b tx timeout [ 65.259697] Bluetooth: hci7: command 0x041b tx timeout [ 65.260691] Bluetooth: hci2: command 0x041b tx timeout [ 65.323714] Bluetooth: hci5: command 0x041b tx timeout [ 65.324753] Bluetooth: hci6: command 0x041b tx timeout [ 65.387794] Bluetooth: hci4: command 0x041b tx timeout [ 67.179683] Bluetooth: hci0: command 0x040f tx timeout [ 67.179701] Bluetooth: hci1: command 0x040f tx timeout [ 67.307791] Bluetooth: hci2: command 0x040f tx timeout [ 67.307806] Bluetooth: hci7: command 0x040f tx timeout [ 67.371688] Bluetooth: hci6: command 0x040f tx timeout [ 67.372103] Bluetooth: hci5: command 0x040f tx timeout [ 67.435709] Bluetooth: hci4: command 0x040f tx timeout [ 67.819842] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 69.227745] Bluetooth: hci1: command 0x0419 tx timeout [ 69.228175] Bluetooth: hci0: command 0x0419 tx timeout [ 69.355748] Bluetooth: hci2: command 0x0419 tx timeout [ 69.356175] Bluetooth: hci7: command 0x0419 tx timeout [ 69.419721] Bluetooth: hci5: command 0x0419 tx timeout [ 69.420138] Bluetooth: hci6: command 0x0419 tx timeout [ 69.483721] Bluetooth: hci4: command 0x0419 tx timeout [ 72.107689] Bluetooth: hci3: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 18:02:04 Registers: info registers vcpu 0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff888033987190 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000069 R11=0000000000000001 R12=0000000000000069 R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe7356a3f000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe7356a3d000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f085f583a70 CR3=0000000016c84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffff88800ffd7528 RDX=1ffff11001ffae99 RSI=ffff88800ffd7458 RDI=ffff88800ffd7488 RBP=ffff88800ffd74e0 RSP=ffff88800ffd73c8 R8 =0000000000000001 R9 =ffff88800ffd74c8 R10=0000000000038001 R11=0000000000000001 R12=ffff88800ffd74e8 R13=ffff88800ffd7488 R14=ffff88800ffd74c9 R15=0000000000000001 RIP=ffffffff81132670 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcd37794540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe1242440000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe124243e000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a2789864c8 CR3=00000000348fc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000