Warning: Permanently added '[localhost]:65117' (ECDSA) to the list of known hosts. 2022/09/30 14:26:56 fuzzer started 2022/09/30 14:26:56 dialing manager at localhost:40535 syzkaller login: [ 41.135753] cgroup: Unknown subsys name 'net' [ 41.252280] cgroup: Unknown subsys name 'rlimit' 2022/09/30 14:27:10 syscalls: 2215 2022/09/30 14:27:10 code coverage: enabled 2022/09/30 14:27:10 comparison tracing: enabled 2022/09/30 14:27:10 extra coverage: enabled 2022/09/30 14:27:10 setuid sandbox: enabled 2022/09/30 14:27:10 namespace sandbox: enabled 2022/09/30 14:27:10 Android sandbox: enabled 2022/09/30 14:27:10 fault injection: enabled 2022/09/30 14:27:10 leak checking: enabled 2022/09/30 14:27:10 net packet injection: enabled 2022/09/30 14:27:10 net device setup: enabled 2022/09/30 14:27:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 14:27:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 14:27:10 USB emulation: enabled 2022/09/30 14:27:10 hci packet injection: enabled 2022/09/30 14:27:10 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 14:27:10 802.15.4 emulation: enabled 2022/09/30 14:27:10 fetching corpus: 50, signal 20473/22316 (executing program) 2022/09/30 14:27:10 fetching corpus: 100, signal 32850/36303 (executing program) 2022/09/30 14:27:10 fetching corpus: 150, signal 44391/49246 (executing program) 2022/09/30 14:27:10 fetching corpus: 200, signal 50496/56758 (executing program) 2022/09/30 14:27:10 fetching corpus: 250, signal 55949/63542 (executing program) 2022/09/30 14:27:10 fetching corpus: 300, signal 60444/69312 (executing program) 2022/09/30 14:27:10 fetching corpus: 350, signal 65986/75993 (executing program) 2022/09/30 14:27:11 fetching corpus: 400, signal 69999/81162 (executing program) 2022/09/30 14:27:11 fetching corpus: 450, signal 74475/86671 (executing program) 2022/09/30 14:27:11 fetching corpus: 500, signal 78429/91655 (executing program) 2022/09/30 14:27:11 fetching corpus: 550, signal 81004/95274 (executing program) 2022/09/30 14:27:11 fetching corpus: 600, signal 84715/99900 (executing program) 2022/09/30 14:27:11 fetching corpus: 650, signal 88069/104117 (executing program) 2022/09/30 14:27:11 fetching corpus: 700, signal 91154/108117 (executing program) 2022/09/30 14:27:11 fetching corpus: 750, signal 92756/110734 (executing program) 2022/09/30 14:27:12 fetching corpus: 800, signal 98084/116589 (executing program) 2022/09/30 14:27:12 fetching corpus: 850, signal 102261/121270 (executing program) 2022/09/30 14:27:12 fetching corpus: 900, signal 104517/124317 (executing program) 2022/09/30 14:27:12 fetching corpus: 950, signal 106853/127387 (executing program) 2022/09/30 14:27:12 fetching corpus: 1000, signal 109321/130494 (executing program) 2022/09/30 14:27:12 fetching corpus: 1050, signal 112121/133822 (executing program) 2022/09/30 14:27:12 fetching corpus: 1100, signal 113337/135856 (executing program) 2022/09/30 14:27:12 fetching corpus: 1150, signal 115353/138517 (executing program) 2022/09/30 14:27:13 fetching corpus: 1200, signal 116961/140825 (executing program) 2022/09/30 14:27:13 fetching corpus: 1250, signal 118279/142894 (executing program) 2022/09/30 14:27:13 fetching corpus: 1300, signal 119994/145203 (executing program) 2022/09/30 14:27:13 fetching corpus: 1350, signal 120915/146949 (executing program) 2022/09/30 14:27:13 fetching corpus: 1400, signal 123039/149536 (executing program) 2022/09/30 14:27:13 fetching corpus: 1450, signal 124788/151875 (executing program) 2022/09/30 14:27:13 fetching corpus: 1500, signal 126164/153802 (executing program) 2022/09/30 14:27:13 fetching corpus: 1550, signal 127633/155827 (executing program) 2022/09/30 14:27:13 fetching corpus: 1600, signal 128609/157409 (executing program) 2022/09/30 14:27:13 fetching corpus: 1650, signal 130388/159663 (executing program) 2022/09/30 14:27:14 fetching corpus: 1700, signal 131205/161120 (executing program) 2022/09/30 14:27:14 fetching corpus: 1750, signal 133015/163228 (executing program) 2022/09/30 14:27:14 fetching corpus: 1800, signal 133996/164750 (executing program) 2022/09/30 14:27:14 fetching corpus: 1850, signal 135591/166714 (executing program) 2022/09/30 14:27:14 fetching corpus: 1900, signal 137379/168724 (executing program) 2022/09/30 14:27:14 fetching corpus: 1950, signal 139324/170757 (executing program) 2022/09/30 14:27:14 fetching corpus: 2000, signal 140392/172274 (executing program) 2022/09/30 14:27:14 fetching corpus: 2050, signal 142589/174558 (executing program) 2022/09/30 14:27:15 fetching corpus: 2100, signal 143587/175977 (executing program) 2022/09/30 14:27:15 fetching corpus: 2150, signal 144535/177335 (executing program) 2022/09/30 14:27:15 fetching corpus: 2200, signal 145726/178847 (executing program) 2022/09/30 14:27:15 fetching corpus: 2250, signal 147020/180478 (executing program) 2022/09/30 14:27:15 fetching corpus: 2300, signal 147909/181741 (executing program) 2022/09/30 14:27:15 fetching corpus: 2350, signal 148574/182875 (executing program) 2022/09/30 14:27:15 fetching corpus: 2400, signal 150211/184538 (executing program) 2022/09/30 14:27:15 fetching corpus: 2450, signal 151452/185997 (executing program) 2022/09/30 14:27:16 fetching corpus: 2500, signal 152209/187086 (executing program) 2022/09/30 14:27:16 fetching corpus: 2550, signal 153371/188420 (executing program) 2022/09/30 14:27:16 fetching corpus: 2600, signal 154302/189627 (executing program) 2022/09/30 14:27:16 fetching corpus: 2650, signal 155012/190696 (executing program) 2022/09/30 14:27:16 fetching corpus: 2700, signal 156439/192123 (executing program) 2022/09/30 14:27:16 fetching corpus: 2750, signal 157270/193211 (executing program) 2022/09/30 14:27:16 fetching corpus: 2800, signal 158055/194284 (executing program) 2022/09/30 14:27:16 fetching corpus: 2850, signal 159493/195623 (executing program) 2022/09/30 14:27:16 fetching corpus: 2900, signal 160119/196570 (executing program) 2022/09/30 14:27:17 fetching corpus: 2950, signal 160984/197623 (executing program) 2022/09/30 14:27:17 fetching corpus: 3000, signal 161833/198637 (executing program) 2022/09/30 14:27:17 fetching corpus: 3050, signal 162518/199547 (executing program) 2022/09/30 14:27:17 fetching corpus: 3100, signal 163308/200515 (executing program) 2022/09/30 14:27:17 fetching corpus: 3150, signal 164573/201712 (executing program) 2022/09/30 14:27:17 fetching corpus: 3200, signal 165832/202867 (executing program) 2022/09/30 14:27:17 fetching corpus: 3250, signal 166552/203734 (executing program) 2022/09/30 14:27:17 fetching corpus: 3300, signal 167351/204620 (executing program) 2022/09/30 14:27:18 fetching corpus: 3350, signal 167886/205408 (executing program) 2022/09/30 14:27:18 fetching corpus: 3400, signal 169173/206521 (executing program) 2022/09/30 14:27:18 fetching corpus: 3450, signal 169668/207298 (executing program) 2022/09/30 14:27:18 fetching corpus: 3500, signal 170668/208249 (executing program) 2022/09/30 14:27:18 fetching corpus: 3550, signal 171329/209042 (executing program) 2022/09/30 14:27:18 fetching corpus: 3600, signal 172259/209914 (executing program) 2022/09/30 14:27:18 fetching corpus: 3650, signal 172528/210516 (executing program) 2022/09/30 14:27:18 fetching corpus: 3700, signal 173521/211373 (executing program) 2022/09/30 14:27:18 fetching corpus: 3750, signal 174232/212097 (executing program) 2022/09/30 14:27:19 fetching corpus: 3800, signal 174978/212898 (executing program) 2022/09/30 14:27:19 fetching corpus: 3850, signal 175690/213665 (executing program) 2022/09/30 14:27:19 fetching corpus: 3900, signal 176557/214424 (executing program) 2022/09/30 14:27:19 fetching corpus: 3950, signal 177742/215332 (executing program) 2022/09/30 14:27:19 fetching corpus: 4000, signal 178476/216020 (executing program) 2022/09/30 14:27:19 fetching corpus: 4050, signal 178893/216623 (executing program) 2022/09/30 14:27:19 fetching corpus: 4100, signal 179422/217256 (executing program) 2022/09/30 14:27:19 fetching corpus: 4150, signal 180135/217873 (executing program) 2022/09/30 14:27:19 fetching corpus: 4200, signal 180581/218445 (executing program) 2022/09/30 14:27:20 fetching corpus: 4250, signal 181301/219103 (executing program) 2022/09/30 14:27:20 fetching corpus: 4300, signal 182009/219721 (executing program) 2022/09/30 14:27:20 fetching corpus: 4350, signal 183405/220550 (executing program) 2022/09/30 14:27:20 fetching corpus: 4400, signal 183976/221188 (executing program) 2022/09/30 14:27:20 fetching corpus: 4450, signal 184862/221869 (executing program) 2022/09/30 14:27:20 fetching corpus: 4500, signal 185468/222409 (executing program) 2022/09/30 14:27:20 fetching corpus: 4550, signal 186089/222895 (executing program) 2022/09/30 14:27:20 fetching corpus: 4600, signal 186782/223445 (executing program) 2022/09/30 14:27:21 fetching corpus: 4650, signal 187359/223969 (executing program) 2022/09/30 14:27:21 fetching corpus: 4700, signal 187884/224458 (executing program) 2022/09/30 14:27:21 fetching corpus: 4750, signal 188265/224954 (executing program) 2022/09/30 14:27:21 fetching corpus: 4800, signal 189453/225529 (executing program) 2022/09/30 14:27:21 fetching corpus: 4850, signal 190609/226432 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/226834 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/227195 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/227572 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/227919 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/228240 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/228590 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/228954 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/229308 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/229691 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/230068 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/230462 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/230854 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/231244 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/231613 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/231969 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/232336 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/232731 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/232936 (executing program) 2022/09/30 14:27:21 fetching corpus: 4872, signal 190746/232936 (executing program) 2022/09/30 14:27:24 starting 8 fuzzer processes 14:27:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000002}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000000c0)={0x9, 0x2, 0x1, 'queue1\x00', 0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$binfmt_aout(r1, &(0x7f00000001c0)={{0xcc, 0x6, 0xff, 0x1ca, 0x300, 0x7fffffff, 0xef, 0x4}, "9f81b6df9cb605d99dddc0e5b6ce175ffd429f6317fa3763e1c8b9d2d0693839d85281c425a4e8640138222b48f913b3904dc5e2928b65d659d4fc35827a297c93915efc0fe40bca750729f0296de5156403db1f01c933d59c7bfdd11fc1af31e8cd754899fd480f560d2eb025bf4ac9c369c16fb19f6ac47c77fdfea590b4a5318371cfff541f831d52a1ea35692e63abc711a04f2f14204f3b918cc1f6a493b69ad09b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8c4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x80001f, 0x30, r1, 0x69ef5000) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400400, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) sendmsg$nl_generic(r1, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd8, 0x3f, 0x200, 0x70bd27, 0x25dfdbff, {0x1e}, [@nested={0x44, 0x8e, 0x0, 0x1, [@generic, @typed={0x3d, 0xc, 0x0, 0x0, @binary="951c7a0b9c30ae9ece7ef6c990fb94eb3ee1b26a221e799b60ed36bc68411e71021a32863d96ba4881d94555f8df0a7d9a8ce2d0dbd3d7d997"}]}, @generic="13159d5673553d52cacfee3c32f65f87e71f87a0faef1fa6b4373fc08aeaab18d5f6a4c2c11c75a79f63fc4958cf093bcd56070eb2ace6e6780861ee4b4e9b8810e42016ddaf47c3bd16babc5e268d26d16829af24ea6f18ee6d051ba0ecf306945a42a52d6fbbf3c37ca64e162a2d2f70e127681a6b78deae0bc23a487f37"]}, 0xd8}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) r4 = openat$incfs(r1, &(0x7f0000000cc0)='.log\x00', 0x88000, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x1000, 0x7a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4801) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f00)={&(0x7f0000000ec0)=@flushpolicy={0x1030, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x20, 0x1000, "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"}}, @mark={0xc, 0x15, {0x35075c, 0x3}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20040010}, 0x890) fsetxattr$security_selinux(r4, &(0x7f0000001f80), &(0x7f0000001fc0)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x2) [ 68.641349] audit: type=1400 audit(1664548044.176:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:27:24 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000100)=""/73, 0x49}], 0x3, 0x7f, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x345540, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000400)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/snd_intel_dspcfg', 0x80, 0x12) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = fsmount(r2, 0x1, 0xa) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000480)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaec6}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9b6}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000600)=0x3) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) syncfs(r1) acct(&(0x7f0000000740)='./file0\x00') 14:27:24 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xfb, 0x3, 0x4, @loopback, @empty, 0x8, 0x80, 0x2, 0x6}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048001}, 0x4004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x24c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x1f8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf898}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_ID={0x8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfb9e}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xc8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/75, 0x4b}, {&(0x7f0000000700)=""/138, 0x8a}], 0x2, &(0x7f0000000800)=""/252, 0xfc}, 0xbd}], 0x1, 0x40002060, &(0x7f0000000940)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000f00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000009c0)={0x4d4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4a0, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x3c0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c2ada4b2d777716ae3be51a9440c78a20f33789397b78f0b4de4d2eda20b7397"}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000001140)={'syztnl2\x00', &(0x7f00000010c0)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x8, 0x78, 0x1c, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x6, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6698}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x91b}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x763}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x100}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0xc800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r2, &(0x7f0000006d80)=[{{&(0x7f0000001440)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002880)=[{&(0x7f00000014c0)=""/143, 0x8f}, {&(0x7f0000001580)=""/9, 0x9}, {&(0x7f00000015c0)=""/151, 0x97}, {&(0x7f0000001680)=""/183, 0xb7}, {&(0x7f0000001740)=""/196, 0xc4}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/1, 0x1}], 0x7, &(0x7f0000002900)=""/43, 0x2b}, 0x2}, {{&(0x7f0000002940)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/228, 0xe4}, {&(0x7f0000002ac0)=""/29, 0x1d}], 0x2, &(0x7f0000002b40)=""/80, 0x50}, 0x5}, {{&(0x7f0000002bc0)=@ieee802154, 0x80, &(0x7f00000050c0)=[{&(0x7f0000002c40)=""/3, 0x3}, {&(0x7f0000002c80)=""/73, 0x49}, {&(0x7f0000002d00)=""/88, 0x58}, {&(0x7f0000002d80)=""/93, 0x5d}, {&(0x7f0000002e00)=""/249, 0xf9}, {&(0x7f0000002f00)=""/166, 0xa6}, {&(0x7f0000002fc0)=""/76, 0x4c}, {&(0x7f0000003040)=""/115, 0x73}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0xa, &(0x7f0000005180)=""/116, 0x74}, 0x1}, {{&(0x7f0000005200), 0x80, &(0x7f00000053c0)=[{&(0x7f0000005280)=""/35, 0x23}, {&(0x7f00000052c0)=""/228, 0xe4}], 0x2}}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000005400)=""/64, 0x40}, {&(0x7f0000005440)=""/188, 0xbc}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/160, 0xa0}, {&(0x7f00000065c0)=""/251, 0xfb}, {&(0x7f00000066c0)=""/180, 0xb4}, {&(0x7f0000006780)=""/18, 0x12}, {&(0x7f00000067c0)=""/252, 0xfc}, {&(0x7f00000068c0)=""/11, 0xb}], 0x9}, 0x3}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000069c0)=""/94, 0x5e}, {&(0x7f0000006a40)=""/80, 0x50}, {&(0x7f0000006ac0)=""/216, 0xd8}, {&(0x7f0000006bc0)=""/170, 0xaa}], 0x4, &(0x7f0000006cc0)=""/157, 0x9d}, 0x7ff}], 0x6, 0x40000000, &(0x7f0000006f00)={0x77359400}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000006f40)={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x401, 0xedaf, 0x400, 0x7ff, 0x1, r7}) setxattr$trusted_overlay_upper(&(0x7f0000006fc0)='./file0\x00', &(0x7f0000007000), &(0x7f0000007040)={0x0, 0xfb, 0x5d, 0x4, 0xc0, "ac29a756424a4473d33f641971e090d5", "5dd1208a19046d966027c05fa143871ebb1b10824e5ef160f1fa9cbdb4e84547d5a6a01391deaf39e97fe669f16703accbfe4fbb8433e86694436fcc6e140b1fc9635dce47efb55c"}, 0x5d, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000007200)={&(0x7f00000070c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000071c0)={&(0x7f0000007140)={0x50, r9, 0x5, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) 14:27:24 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xfffffffffffffffe) setsockopt$inet_int(r0, 0x0, 0x3d, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth1_macvtap\x00'}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$AUDIT_USER(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x3ed, 0x10, 0x70bd2a, 0x25dfdbfb, "f1d57b109bc8e09cdfe76b82b1fd95685568ba8b7a419ed97124883e2b36883b6718857841ca206c1223d0f5dfab8fd65941d040d0b784b7388e01720f6fd15317d8b044658f952fae23f57240a7a52cc320a1c46a75a5a8166122c872da7c0ba57aee6ab7bdfea2e12f17f655ab50b1e3d38d12769adfd1872783f3ca1e0a0be4be939a08eb056e4913dd1fd7a8af8a8e8745a777bc1c8189416f842df825521d9c55c47831430f31dcba6a76b995f3d74657", ["", "", "", "", "", "", ""]}, 0xc4}}, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000300)={0x3, 0x2, 0x1}) pidfd_send_signal(r0, 0x1, &(0x7f0000000340)={0x22, 0x399f, 0x3}, 0x0) r1 = open_tree(r0, &(0x7f00000003c0)='./file0\x00', 0x1100) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000400)={'IDLETIMER\x00'}, &(0x7f0000000440)=0x1e) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1925bc5845727a7}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000580)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000820}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5445}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xec79}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x200080d0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000800)=0x8f8b) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0xc8d0) 14:27:24 executing program 4: setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x4e23, 0x2e, @empty, 0x62}}}, 0x88) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='^(\xa0\x00', 0x0, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xfb, 0x20, 0x55, 0x1f, 0x0, 0x6, 0x21000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x153, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x30, 0x8, 0x9, 0x6, 0x100000001, 0x0, 0x92d, 0x0, 0x1000, 0x0, 0x8000}, 0x0, 0xd, r1, 0x1) close_range(r2, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', r3, 0x4, 0x6, 0xcd, 0x10000, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0x6, 0x7}}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x0, 0x8, 0x80000001, 0x5, {{0x22, 0x4, 0x3, 0x24, 0x88, 0x65, 0x0, 0x15, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@end, @timestamp_prespec={0x44, 0x1c, 0x64, 0x3, 0xf, [{@multicast1, 0xc8e}, {@empty, 0x18a89d50}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0xcb, 0x3, 0x2, [{@rand_addr=0x64010101, 0x1f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x7f}, {@multicast1}, {@multicast1, 0x6}]}, @ssrr={0x89, 0x17, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x13, 0xca, [@multicast2, @rand_addr=0x64010100, @loopback, @loopback]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7da}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000640)={0x0, 'veth1\x00', {0x2}, 0x111}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) getsockname$inet6(r6, &(0x7f00000006c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000700)=0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 14:27:24 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0x19c, 0xc5e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = openat$cgroup_ro(r0, &(0x7f0000002700)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000002740)={0xfffffffffffffffd, 0x1, 0x7fffffff, 0x1, 0x401}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002780), 0x200400, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000002bc0)={0x0, 0x0, 0x2, 0x11, 0x4d, &(0x7f00000027c0)="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"}) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000002c00)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002cc0)={'ip6tnl0\x00', &(0x7f0000002c40)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x6, 0x4ca, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x8, 0x7, 0xd98b, 0x4}}) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r5 = dup3(r1, r0, 0x0) write$binfmt_elf32(r5, &(0x7f0000002d00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xfa, 0x5, 0x2, 0x1000, 0x2, 0x3e, 0x4, 0x209, 0x38, 0x2f, 0x1, 0x200, 0x20, 0x1, 0x0, 0x0, 0x2f}, [{0x7, 0x4, 0x82e, 0x6, 0x7ff, 0x80, 0x9, 0x25b10df6}], "7c74aaeb654040ca95297e38e67163bfc5b8b1daabb3dca43941af90cb5100b2843dbde2a7e6a16acb96e1b7edb3b7b66bdf95e9d680b2d9fa460f245f43915b8bddfc00a17491e440a3a1fde4770581d9441bfbc211cb3a66b32239b6023b804e658340c62643f542855ef6b10c3f4863904c177ecfda680416108f7e3cfcbf73226ea912f502040eeec726f8fd43149d8601ddab05347a0ae6339bb0f4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8f6) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000003600)={@mcast2, @private2, @remote, 0x7, 0x3, 0xfb9, 0x200, 0x2, 0x4088002c, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000003680)={{0x1, 0x1, 0x18, r2, {0x7fffffff}}, './file0\x00'}) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f00000036c0)) sendmsg(r5, &(0x7f0000003a80)={&(0x7f0000003700)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003780)="23cc0efd0ea41bf3ed1d20d682129ea59de437d44b83b8345cbdfd0cdfee4b2cb6ca6e79da2143cc0e4947afc2b89ca75ac06162", 0x34}, {&(0x7f00000037c0)="7c629811b858c4028e8d833dd9fa0cdf15ad6e991ffb38b6bf20577c08011a5fbf091e849fb0185249232d72f48462bb20d1b96ad2c0aebc72e968237fd437b59277fc45af16e9de2bbee94b8198351b69dd9ae58f835b15c536e9b4900fd88f319d39d4daa66b", 0x67}, {&(0x7f0000003840)="df31705c40010c3e040dd526416e91647e1439b590abdb4f49fcd18333942232fcd0d1bc1d9308690c9e29f11c3075a23bd3787c2888001f7aa43933f94c5d70a220e04a23345fd1875b3a8a25b18e9d6aefcb6a6d88", 0x56}, {&(0x7f00000038c0)="96342010e4574763894eb861c1517c6823b3076e90fabd829951eb17a46b7e3f6a59ce697cfb441a59e1bfb1c3f9fff1e67c45c660afeb7c821f5385d42071478bf63f8e0a9d59dffd1f45005a08e62d2ef26f4677ba44f863d2c3d08d92eea7b4a8445b7b481bab357809a28ff0a349c2", 0x71}, {&(0x7f0000003940)="9057cafc718eef4674875b386d8d0b77b0f7f338cda7c09a5ef887b981a3a6c7f51d74227998991704f5d1e2b0f51e01971185a90b233a21ce9136ac289c009f69f5e1f465334d0845368749ea4070d7362ef2d7d282829d0a501dfb429b1694fe0931c14d8c9652bdb3feed6c9304401e557e040378f1dd06ff2d263c22fed56e16efab383004234670075a756f9d66a0b1f8b6", 0x94}], 0x5}, 0x0) recvmmsg$unix(r0, &(0x7f0000007100)=[{{&(0x7f0000003ac0), 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000003b40)=""/181, 0xb5}, {&(0x7f0000003c00)=""/41, 0x29}, {&(0x7f0000003c40)=""/101, 0x65}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000004d00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000004e00)=@abs, 0x6e, &(0x7f0000005e80)=[{&(0x7f0000004e80)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000005ec0), 0x6e, &(0x7f0000007000)=[{&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/43, 0x2b}, {&(0x7f0000006f80)=""/127, 0x7f}], 0x3, &(0x7f0000007040)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x3, 0x10040, &(0x7f00000071c0)={0x77359400}) preadv2(r7, &(0x7f0000007840)=[{&(0x7f0000007200)=""/246, 0xf6}, {&(0x7f0000007300)=""/222, 0xde}, {&(0x7f0000007400)=""/175, 0xaf}, {&(0x7f00000074c0)=""/55, 0x37}, {&(0x7f0000007500)}, {&(0x7f0000007540)=""/83, 0x53}, {&(0x7f00000075c0)=""/252, 0xfc}, {&(0x7f00000076c0)=""/235, 0xeb}, {&(0x7f00000077c0)=""/86, 0x56}], 0x9, 0x9, 0x9, 0x8) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000007940)) 14:27:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="ed38828510ca71d0a14c121051739578cdd84d5a4ee53b7d70969586998c3b900b94559adffc7cabeb5bec999f04b337cb30ebcf69e7d2577b49451d6a794d4738c1461e49f76b492bd1326484c784016b071ed9603f88ff443448d1", 0x5c, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000240)='^*\x00', &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) keyctl$describe(0x6, r2, &(0x7f0000000300)=""/234, 0xea) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x80) r7 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) keyctl$instantiate(0xc, r7, &(0x7f0000000880)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '^*\x00'}, 0x19, 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x6}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x20004014) 14:27:24 executing program 7: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x17, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x41) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f00000006c0)=""/29, 0x1d}, {&(0x7f0000000700)=""/198, 0xc6}], 0x8, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x1, 0x0, &(0x7f0000000940)={0x0, 0x989680}) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1d8, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "b1eff21911324b3c65e8d58871b0a98b713ef32956"}}, @TIPC_NLA_NODE_ID={0xba, 0x3, "e028fff6fe0f52ba49efb55074f8562de8cc4f63bbc6c35644798c872e1be7baf04ba850a21637c09d33caec47f7669e61fd603acbfa548b8e23f4b51f02763d660afae73bb07d83e5bc225195499fd26bc4e8c147a9a5be23873402a5c4fb3294ced755ac7516487ef8e269db9906fc3b057bdc93e720fff7295ac39afdfdc2ec76031208627084e69126435e87a5fb58d009b0d6124c7052fa10d90dcd057695e6c3ecf775d2fce9b7e9f8519bfece4a2ff8044027"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a53414aaca0c7fb38c0862adea97a7cac0fb7ced4edc3d00297c1a3c3099cb5bd1e932273cad801710c25879d1dc23c76d909c6b5cfdd188bcbb51d24ff7eda9dc6f433b55657435be1ad8c636ae9cd26f80abbb5649dbd11a0f562638e988483bbbd9504e8b81b7e19f702c10dd7100a36cb709b19e2d74c1a0fd78e7d11082e19ab3b2918950f88fb4ffa56b534c48"}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x81}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r2) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r5, 0x1, 0x70bd2b, 0x20, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7a4e, 0x23}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40019}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x26}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000850}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r2, {0xf96}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r5, 0x201, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001700)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x46c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2cb, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @broadcast, @device_b, @initial, {0x5, 0x7}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x300, 0x8, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x3, 0x1}, {0x24}, {0x3, 0x1}]}, @void, [{0xdd, 0x7d, "0b2682d4066a420a2040faa7431a776a0daa5c9f8bf0fff3143e09df19ec8466911eba61949a4fc5a3f24a34ac409126ea42ccc72343c2a67bdf6da9b839e6f160fe84f061fbff6c41c62edb55b175a003a5685198a579da6488b8eb58ca780b1eb56f25b5de0636a2a08c20eb8ecfb5d8a5abb36dc9e6fb876cd96def"}, {0xdd, 0xaf, "d4ce0fa2e7fc8c7cd1d1024ff2593165ca106dc31fa0a20f622a73aba7c0e30b9819970fd225c720950e7b62868588d20e3a0ec9b379f428bad84ddb53d56d9fc0159fcfd77e314b20d1808d751d03448e5782b2b476ca24c8d08a4b18d5deec1b22b614807b68a68314397cd0aa8a98052144a3383da35c38d991418e8099ad32516cfc1a55de2cba04d0e58156a33d90891ded30410ccca366b2b3183f836c48c0842d767fb700985c55e2efe8f4"}, {0xdd, 0x88, "326bc9b6d7717f284944b64f31d0e73697a65e7e06f2624735dd8a7831f0a3dfc688af4eb16195990ed7883acee029cbff7ec7ea83a86da4578322534fe19cbd232423caac7799a0192f6d6207c9750de5c02c1d64686f2262040119f871a304129e6f24eb4b2909310810aa0026b058466fbdf76a9111c053c539d5cb33286da43e4b6f89e98657"}, {0xdd, 0xde, "7d516b83852ad4fb9637550abbdb3cbcd689bb760e918ac06e8433e51a692f9b181799022aed4f536a563c8a219fa4533c5687b4b48e25550dbe34dc8ffc3cfec35ce436c42ae9c0c832359382f83fe30cd4d1d23da2c49dcd1e85b4448892807d0a05f01b6e85567292a8f098eb90383551eeb1c01e10172f3d30ff512af4a1e64260aa7056f15f496f0227a8df55fc8a20d153e3ebd4b8589c3f9d77e2e6279eaf3d1626b3ccf3f258d1a28f4152f1ffa5db8a866a8b6fc6dd97e676847070a6b9e100571fb7bf72905069e4d4c570ff88f20c42d40904eec4e047dccb"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @device_a, @broadcast}}, @NL80211_ATTR_FRAME={0x161, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7350}, @device_a, @device_b, @from_mac, {0x6, 0x82e}}, @ver_80211n={0x0, 0x80, 0x3, 0x0, 0x0, 0x3, 0x1}}, 0x3, 0x6, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xa2, "0ee05e4b1450ab94e7720d7942ce193e5734d1feaf83c2995c72cd22fb21975b787be3036516216c1167d49f8b80d6c04539cdfa9e2b7e4782ef148e2f03a6a8dbb9ea6dd596375222c0e00629968457436d5c643dcadb40c63413e40effbefc3854435a92746bed9b0eb4e00a26c675f43b587359650ab3c332c2e86e96e40f78b2298b14a2cf6f29a4e833870ae126277cba56946fd8ae3836b0a4c24bd126c620"}, {0xdd, 0x8f, "886675cfcb9770c998de3f74714eceffe0937ca70cbdb624c9c940cca342e520040da837f6ef64b4024a01e124e82ae3521700629c24219e7298155f36f07b0689f22d3af0dfaa045b868b79bac4061b2f6a705b468a0fd0d406b4ab15c5660012f219f149198974990afba8e91d1a219e0c22a379fdcee7c702fe59c0646d16c61cc4c349c1218d515d227c181f36"}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x448d0}, 0x4000081) syz_mount_image$vfat(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x1, 0x4, &(0x7f0000001a00)=[{&(0x7f00000017c0)="ba6a57a0a7af9424e57b8fe3631daeba1ecb104857c6c61e30fa599bc6b5241a242232de990bb857082516357322531478a08c24", 0x34, 0x3ff}, {&(0x7f0000001800)="efd4ec03a3971b1d73b60772206d6664f0fb39570637a630c4b5f8e2be74b9c294d3c6c47c29b51a3325a068b2e5a9f719ea0bfff35379e291dead402713eeac87285810be90309faa6d44bcaa01528dbe45e3cff4e1d62aa056256754b8fb195308efa0a66177ff90c623d4c2aa323c03472ae1b76b0758ccdfd1b376c07ffc96a755f3841bd21c08e6c41ced3993a8c634b056b216070ac521495e836e88aa4022e400d846da9ef80b41c4", 0xac, 0x8000}, {&(0x7f00000018c0)="8a484e471b891f0d1e263e4f7c9d3ec74ced86726d6dcaae5fa3e02d3e2957b68ceefb1f2b77274a92b14f74858359aa4be7089dff9419cf25d8e2", 0x3b, 0x4}, {&(0x7f0000001900)="8774c5a3c5ddbc4e8796e2331ba236107b8decfa6ea1acd0837224e8d011a2561755c8f9620595d854ffffaf1a622dfe1c24000e6b3b237f6d86c696af32130ec592e64e2c7d55b41920bdd23f86fe359f0a0e9803d496eb9ce5bed9fcd20a625666cb9db17e3367c75d89dd53988dbf169e12a4f366354b78c15fc5a5c5702ab7cb330809f5c7b7da73fa378f96b9b5083af1c8fc97c9d7805e33cc7691f7b4e87b3ed63f22772bc0e2b7145b5b0d9d93837fe5507ab3d8f80686acf3d1ac4c8f490dd1a7c44a456d58791422ffd49444f63038a341ab2a", 0xd8, 0x2519}], 0x108000, &(0x7f0000001a80)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}, {@numtail}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'syz1\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@measure}, {@fowner_eq={'fowner', 0x3d, r1}}]}) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80), 0x208200, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x5c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, 'PATH_CHECK'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, 'gcm(aes)\x00'}]}, 0x5c}}, 0x20000041) fchown(0xffffffffffffffff, r1, 0x0) [ 69.974307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.977294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.978774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.983693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.986210] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.987683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.993726] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.097987] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.100359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.106721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.110745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.113219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.114548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.120263] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.169497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.172202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.173673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.189553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.191547] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.192940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.199479] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.233875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.235366] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.245492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.246581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.247755] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.249375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.250348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.251496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.258126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.262580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.268832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.272786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.273890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.279031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.280364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.286910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.288174] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 70.304182] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.305845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.321167] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.356942] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.055574] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 72.056632] Bluetooth: hci0: command 0x0409 tx timeout [ 72.184151] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 72.185556] Bluetooth: hci2: command 0x0409 tx timeout [ 72.247142] Bluetooth: hci4: command 0x0409 tx timeout [ 72.376170] Bluetooth: hci7: command 0x0409 tx timeout [ 72.376902] Bluetooth: hci3: command 0x0409 tx timeout [ 72.377438] Bluetooth: hci6: command 0x0409 tx timeout [ 74.104100] Bluetooth: hci0: command 0x041b tx timeout [ 74.231115] Bluetooth: hci2: command 0x041b tx timeout [ 74.295132] Bluetooth: hci4: command 0x041b tx timeout [ 74.423180] Bluetooth: hci6: command 0x041b tx timeout [ 74.423656] Bluetooth: hci3: command 0x041b tx timeout [ 74.424109] Bluetooth: hci7: command 0x041b tx timeout [ 74.976166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.979869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.989881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.997256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.003291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.005990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.013088] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.158616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.161817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.164855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.177290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.183303] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.186147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.210430] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.152106] Bluetooth: hci0: command 0x040f tx timeout [ 76.280298] Bluetooth: hci2: command 0x040f tx timeout [ 76.344143] Bluetooth: hci4: command 0x040f tx timeout [ 76.472163] Bluetooth: hci7: command 0x040f tx timeout [ 76.472631] Bluetooth: hci3: command 0x040f tx timeout [ 76.473081] Bluetooth: hci6: command 0x040f tx timeout [ 77.048143] Bluetooth: hci1: command 0x0409 tx timeout [ 77.240342] Bluetooth: hci5: command 0x0409 tx timeout [ 78.200238] Bluetooth: hci0: command 0x0419 tx timeout [ 78.328120] Bluetooth: hci2: command 0x0419 tx timeout [ 78.392147] Bluetooth: hci4: command 0x0419 tx timeout [ 78.520121] Bluetooth: hci6: command 0x0419 tx timeout [ 78.520592] Bluetooth: hci3: command 0x0419 tx timeout [ 78.520991] Bluetooth: hci7: command 0x0419 tx timeout [ 79.096141] Bluetooth: hci1: command 0x041b tx timeout [ 79.289078] Bluetooth: hci5: command 0x041b tx timeout [ 81.144091] Bluetooth: hci1: command 0x040f tx timeout [ 81.335153] Bluetooth: hci5: command 0x040f tx timeout [ 83.192122] Bluetooth: hci1: command 0x0419 tx timeout [ 83.384137] Bluetooth: hci5: command 0x0419 tx timeout [ 124.805136] audit: type=1400 audit(1664548100.339:7): avc: denied { open } for pid=3773 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.806690] audit: type=1400 audit(1664548100.339:8): avc: denied { kernel } for pid=3773 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:28:20 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@x25, &(0x7f0000000300)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@empty}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tipc={{0xa, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev, {[@lsrr={0x83, 0x3, 0xf, [@remote, @local, @multicast1]}, @lsrr={0x83, 0x3}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) 14:28:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) [ 125.443309] loop7: detected capacity change from 0 to 128 [ 125.448075] hrtimer: interrupt took 38974 ns [ 125.451500] ------------[ cut here ]------------ [ 125.451530] [ 125.451535] ====================================================== [ 125.451541] WARNING: possible circular locking dependency detected [ 125.451547] 6.0.0-rc7-next-20220929 #1 Not tainted [ 125.451559] ------------------------------------------------------ [ 125.451564] syz-executor.4/3814 is trying to acquire lock: [ 125.451576] ffffffff853faab8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70 [ 125.451641] [ 125.451641] but task is already holding lock: [ 125.451645] ffff88803edd3820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.451693] [ 125.451693] which lock already depends on the new lock. [ 125.451693] [ 125.451698] [ 125.451698] the existing dependency chain (in reverse order) is: [ 125.451703] [ 125.451703] -> #3 (&ctx->lock){....}-{2:2}: [ 125.451728] _raw_spin_lock+0x2a/0x40 [ 125.451748] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.451769] __schedule+0xedd/0x2470 [ 125.451794] preempt_schedule_common+0x45/0xc0 [ 125.451822] __cond_resched+0x17/0x30 [ 125.451847] __mutex_lock+0xa3/0x14d0 [ 125.451875] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.451896] do_syscall_64+0x3b/0x90 [ 125.451926] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.451950] [ 125.451950] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.451975] _raw_spin_lock_nested+0x30/0x40 [ 125.451994] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.452017] task_fork_fair+0x63/0x4d0 [ 125.452047] sched_cgroup_fork+0x3d0/0x540 [ 125.452073] copy_process+0x4183/0x6e20 [ 125.452092] kernel_clone+0xe7/0x890 [ 125.452109] user_mode_thread+0xad/0xf0 [ 125.452128] rest_init+0x24/0x250 [ 125.452149] arch_call_rest_init+0xf/0x14 [ 125.452178] start_kernel+0x4c6/0x4eb [ 125.452205] secondary_startup_64_no_verify+0xe0/0xeb [ 125.452230] [ 125.452230] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.452255] _raw_spin_lock_irqsave+0x39/0x60 [ 125.452275] try_to_wake_up+0xab/0x1930 [ 125.452299] up+0x75/0xb0 [ 125.452325] __up_console_sem+0x6e/0x80 [ 125.452353] console_unlock+0x46a/0x590 [ 125.452382] vt_ioctl+0x2822/0x2ca0 [ 125.452402] tty_ioctl+0x785/0x16b0 [ 125.452421] __x64_sys_ioctl+0x19a/0x210 [ 125.452445] do_syscall_64+0x3b/0x90 [ 125.452475] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.452499] [ 125.452499] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 125.452524] __lock_acquire+0x2a02/0x5e70 [ 125.452554] lock_acquire+0x1a2/0x530 [ 125.452583] _raw_spin_lock_irqsave+0x39/0x60 [ 125.452602] down_trylock+0xe/0x70 [ 125.452630] __down_trylock_console_sem+0x3b/0xd0 [ 125.452659] vprintk_emit+0x16b/0x560 [ 125.452689] vprintk+0x84/0xa0 [ 125.452718] _printk+0xba/0xf1 [ 125.452738] report_bug.cold+0x72/0xab [ 125.452767] handle_bug+0x3c/0x70 [ 125.452798] exc_invalid_op+0x14/0x50 [ 125.452829] asm_exc_invalid_op+0x16/0x20 [ 125.452850] group_sched_out.part.0+0x2c7/0x460 [ 125.452883] ctx_sched_out+0x8f1/0xc10 [ 125.452913] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.452934] __schedule+0xedd/0x2470 [ 125.452959] preempt_schedule_common+0x45/0xc0 [ 125.452986] __cond_resched+0x17/0x30 [ 125.453011] __mutex_lock+0xa3/0x14d0 [ 125.453039] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.453060] do_syscall_64+0x3b/0x90 [ 125.453090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.453113] [ 125.453113] other info that might help us debug this: [ 125.453113] [ 125.453118] Chain exists of: [ 125.453118] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.453118] [ 125.453145] Possible unsafe locking scenario: [ 125.453145] [ 125.453149] CPU0 CPU1 [ 125.453153] ---- ---- [ 125.453157] lock(&ctx->lock); [ 125.453167] lock(&rq->__lock); [ 125.453179] lock(&ctx->lock); [ 125.453191] lock((console_sem).lock); [ 125.453201] [ 125.453201] *** DEADLOCK *** [ 125.453201] [ 125.453205] 2 locks held by syz-executor.4/3814: [ 125.453217] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.453272] #1: ffff88803edd3820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.453320] [ 125.453320] stack backtrace: [ 125.453325] CPU: 0 PID: 3814 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 125.453348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.453362] Call Trace: [ 125.453367] [ 125.453374] dump_stack_lvl+0x8b/0xb3 [ 125.453407] check_noncircular+0x263/0x2e0 [ 125.453438] ? format_decode+0x26c/0xb50 [ 125.453467] ? print_circular_bug+0x450/0x450 [ 125.453498] ? enable_ptr_key_workfn+0x20/0x20 [ 125.453527] ? __lockdep_reset_lock+0x180/0x180 [ 125.453558] ? format_decode+0x26c/0xb50 [ 125.453591] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.453624] __lock_acquire+0x2a02/0x5e70 [ 125.453664] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.453707] lock_acquire+0x1a2/0x530 [ 125.453737] ? down_trylock+0xe/0x70 [ 125.453769] ? lock_release+0x750/0x750 [ 125.453804] ? find_held_lock+0x2c/0x110 [ 125.453835] ? vprintk+0x84/0xa0 [ 125.453868] _raw_spin_lock_irqsave+0x39/0x60 [ 125.453889] ? down_trylock+0xe/0x70 [ 125.453919] down_trylock+0xe/0x70 [ 125.453948] ? vprintk+0x84/0xa0 [ 125.453979] __down_trylock_console_sem+0x3b/0xd0 [ 125.454011] vprintk_emit+0x16b/0x560 [ 125.454047] vprintk+0x84/0xa0 [ 125.454079] _printk+0xba/0xf1 [ 125.454100] ? record_print_text.cold+0x16/0x16 [ 125.454126] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 125.454152] ? lock_downgrade+0x6d0/0x6d0 [ 125.454184] ? report_bug.cold+0x66/0xab [ 125.454218] ? group_sched_out.part.0+0x2c7/0x460 [ 125.454252] report_bug.cold+0x72/0xab [ 125.454287] handle_bug+0x3c/0x70 [ 125.454319] exc_invalid_op+0x14/0x50 [ 125.454352] asm_exc_invalid_op+0x16/0x20 [ 125.454376] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.454413] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.454433] RSP: 0018:ffff888040427978 EFLAGS: 00010006 [ 125.454450] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.454464] RDX: ffff88800d690000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 125.454478] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 125.454492] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803edd3800 [ 125.454505] R13: ffff88806ce3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 125.454526] ? group_sched_out.part.0+0x2c7/0x460 [ 125.454563] ? group_sched_out.part.0+0x2c7/0x460 [ 125.454600] ctx_sched_out+0x8f1/0xc10 [ 125.454636] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.454663] ? lock_is_held_type+0xd7/0x130 [ 125.454689] ? __perf_cgroup_move+0x160/0x160 [ 125.454709] ? set_next_entity+0x304/0x550 [ 125.454741] ? update_curr+0x267/0x740 [ 125.454775] ? lock_is_held_type+0xd7/0x130 [ 125.454802] __schedule+0xedd/0x2470 [ 125.454834] ? io_schedule_timeout+0x150/0x150 [ 125.454865] ? lock_is_held_type+0xd7/0x130 [ 125.454889] ? __cond_resched+0x17/0x30 [ 125.454918] preempt_schedule_common+0x45/0xc0 [ 125.454948] __cond_resched+0x17/0x30 [ 125.454975] __mutex_lock+0xa3/0x14d0 [ 125.455007] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.455031] ? __up_read+0xcd/0x730 [ 125.455057] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.455088] ? __up_read+0xec/0x730 [ 125.455115] ? __up_read+0x192/0x730 [ 125.455142] ? up_write+0x520/0x520 [ 125.455174] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.455202] ? __up_read+0x192/0x730 [ 125.455228] ? perf_compat_ioctl+0x130/0x130 [ 125.455274] ? up_write+0x520/0x520 [ 125.455308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.455334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.455363] do_syscall_64+0x3b/0x90 [ 125.455396] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.455420] RIP: 0033:0x7f68f76fab19 [ 125.455435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.455455] RSP: 002b:00007f68f4c70188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.455475] RAX: ffffffffffffffda RBX: 00007f68f780df60 RCX: 00007f68f76fab19 [ 125.455490] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 125.455503] RBP: 00007f68f7754f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.455517] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.455530] R13: 00007ffeef354b5f R14: 00007f68f4c70300 R15: 0000000000022000 [ 125.455555] [ 125.563979] WARNING: CPU: 0 PID: 3814 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.565218] Modules linked in: [ 125.565656] CPU: 0 PID: 3814 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 125.566735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.568238] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.568974] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.571358] RSP: 0018:ffff888040427978 EFLAGS: 00010006 [ 125.572069] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.573023] RDX: ffff88800d690000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 125.573966] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 125.574938] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803edd3800 [ 125.575903] R13: ffff88806ce3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 125.576861] FS: 00007f68f4c70700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.577930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.578705] CR2: 00007f68f780e018 CR3: 000000000de5c000 CR4: 0000000000350ef0 [ 125.579675] Call Trace: [ 125.580029] [ 125.580348] ctx_sched_out+0x8f1/0xc10 [ 125.580889] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.581585] ? lock_is_held_type+0xd7/0x130 [ 125.582178] ? __perf_cgroup_move+0x160/0x160 [ 125.582788] ? set_next_entity+0x304/0x550 [ 125.583379] ? update_curr+0x267/0x740 [ 125.583919] ? lock_is_held_type+0xd7/0x130 [ 125.584514] __schedule+0xedd/0x2470 [ 125.585037] ? io_schedule_timeout+0x150/0x150 [ 125.585680] ? lock_is_held_type+0xd7/0x130 [ 125.586265] ? __cond_resched+0x17/0x30 [ 125.586819] preempt_schedule_common+0x45/0xc0 [ 125.587476] __cond_resched+0x17/0x30 [ 125.588002] __mutex_lock+0xa3/0x14d0 [ 125.588537] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.589237] ? __up_read+0xcd/0x730 [ 125.589752] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.590416] ? __up_read+0xec/0x730 [ 125.590923] ? __up_read+0x192/0x730 [ 125.591448] ? up_write+0x520/0x520 [ 125.591959] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.592647] ? __up_read+0x192/0x730 [ 125.593166] ? perf_compat_ioctl+0x130/0x130 [ 125.593771] ? up_write+0x520/0x520 [ 125.594282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.594988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.595708] do_syscall_64+0x3b/0x90 [ 125.596237] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.596935] RIP: 0033:0x7f68f76fab19 [ 125.597436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.599875] RSP: 002b:00007f68f4c70188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.600885] RAX: ffffffffffffffda RBX: 00007f68f780df60 RCX: 00007f68f76fab19 [ 125.601835] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 125.602789] RBP: 00007f68f7754f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.603752] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.604698] R13: 00007ffeef354b5f R14: 00007f68f4c70300 R15: 0000000000022000 [ 125.605655] [ 125.605976] irq event stamp: 528 [ 125.606430] hardirqs last enabled at (527): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.607737] hardirqs last disabled at (528): [] __schedule+0x1225/0x2470 [ 125.608842] softirqs last enabled at (522): [] __irq_exit_rcu+0x11b/0x180 [ 125.609976] softirqs last disabled at (189): [] __irq_exit_rcu+0x11b/0x180 [ 125.611100] ---[ end trace 0000000000000000 ]--- 14:28:21 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601cf8010000000000000020000000005d17f5f88634350a46c119c879523456b6db159f7965f8037d74618286d74fc7e3de9e34d4d78bc2c4e2deb93bde0c22a0e7b8d0eee9797326093ccc2e57", 0x4e}, {0x0, 0x0, 0x2800}], 0x1224401, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES64=r1, @ANYRESHEX=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="c0", 0x1, 0x75d6) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r3, &(0x7f0000000080)='./file1\x00', 0x200000, 0x100) [ 125.929267] loop2: detected capacity change from 0 to 264192 [ 126.021319] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.031811] loop7: detected capacity change from 0 to 128 [ 126.061203] loop2: detected capacity change from 0 to 264192 14:28:21 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/141, 0x8d}], 0x2, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x2000, &(0x7f0000000340)={0x0, 0x989680}) read$eventfd(r0, &(0x7f0000000380), 0x8) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3ff) r1 = creat(&(0x7f0000000940)='./file0\x00', 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000001fc0), 0x0, 0x0, 0x7, &(0x7f0000003540)=[{&(0x7f0000002040)="de37fe5096d259ab0117e16bb91f70c862a3f109a4698397a084c0ea8779ecaf3ca7ab5ca3625bfcba242456fbe6f6b0692100d2eea6a2de9ae85b700e03321d09812a7a1368380b7f0c", 0x4a}, {&(0x7f00000020c0)="fcdac1806b49a5f879ce1c9f44348cb72836fb9e070c104162bade7da0078c855a7bf65949525905c75189ef95ba6a9e3722605bcc67a7c09000cdc75458a9eeba218df73e07a42ea6b27d3edc88cdc83e10c08e9008d8f8b838e29295ecdc1b1fefb91436ef3c218557bb354c18f857ebffa85ceadbe922eb07e9677a0cdacee8108e7a509b3a6ddac58141c89642fb030937eac46fd1df86473c8fb9af1c27ed7b83857d73a3bcf86800e54ecf1f9eed20fd49413dbd666b8b5ae8df16518ec743f65077", 0xc5, 0x1}, {&(0x7f00000021c0)="0a8aa5e0e5513048a31e54d448cf1b5d2aa81421c1acc6da4becc92a19d0fd8283d6887f07549a89ba674adffb9137e50f86cba7c2b9f1f3d4cb0185991bf576c274d80f51372f01b8ac08cfdf334b2f59b4c8b8", 0x54, 0x1}, {0x0, 0x0, 0x1}, {&(0x7f00000022c0)="8c5d0aa58ae4ab24fe45a548306c195b2d604620f0b0c2d60ad369b0d5f95d1bd3e137df3e8250ef771ec4e047247a3db7b4c3ade1b6545f2d1f151b5f7f29483f0299cf7dfba7117dfc6634537e4eb6f288e2ed6fdf1fb7a399dfb21548fc1e0bdfa2a84a2718c0e6abeeded2d1df1d6b26ebca1234a49a801655ffe859265a6403a6124fc44d80cc186604d415e68ad67b015adc98854f4d8d90cabac41c08f0706339a95d", 0xa6, 0x8}, {&(0x7f0000002380)}, {&(0x7f00000024c0), 0x0, 0x6}], 0x509b66f1b417291c, &(0x7f0000003640)=ANY=[@ANYBLOB="6d636173745f72656a6f696e5f636f756e74022c2c6c625f74785f6d6574686f64002c6270665f686173685f66756e63002c6d636173745f72656a6f696e5f636f756e74002c7065726d69745f646972656374696f2c66736e616d653d5c2c00"]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x86a, 0x1000, 0x0, 0x3f, 0xe4, 0x100]}) clock_gettime(0x0, &(0x7f0000003e00)) ioprio_get$pid(0x2, 0x0) llistxattr(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)=""/199, 0xc7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004040)) [ 126.185122] I/O error, dev loop2, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 VM DIAGNOSIS: 14:28:21 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823ba33c RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff8880404273c8 R8 =0000000000000001 R9 =ffff888040427353 R10=ffffed1008084e6a R11=0000000000000001 R12=000000000000005c R13=ffffffff8765a980 R14=ffffffff8765a9d0 R15=ffffffff8765ac30 RIP=ffffffff823ba391 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f68f4c70700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f68f780e018 CR3=000000000de5c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff8424ca5b RBX=ffffffff81359ce0 RCX=0000000000000000 RDX=1ffff11001ee3e98 RSI=ffffffff8424ca5b RDI=ffff88800f71f530 RBP=ffff88800f71f500 RSP=ffff88800f71f468 R8 =ffffffff85ee6bb6 R9 =ffffffff85ee6bba R10=ffffed1001ee3e9a R11=ffff88800f71f4a8 R12=ffff88800f71f530 R13=0000000000000000 R14=ffff88800d250000 R15=0000000000000000 RIP=ffffffff810acdbe RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff84fadb8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056532be27c70 CR3=000000000fb74000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 737265646c6f682f YMM03=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 00005601998d6d30 00005601998d6d10 YMM06=0000000000000000 0000000000000000 00005601998c5fe0 0000000000000002 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000020000000 0000000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000