Warning: Permanently added '[localhost]:17428' (ECDSA) to the list of known hosts. 2022/10/02 17:22:33 fuzzer started 2022/10/02 17:22:34 dialing manager at localhost:35095 syzkaller login: [ 44.696399] cgroup: Unknown subsys name 'net' [ 44.802185] cgroup: Unknown subsys name 'rlimit' 2022/10/02 17:22:48 syscalls: 202 2022/10/02 17:22:48 code coverage: enabled 2022/10/02 17:22:48 comparison tracing: enabled 2022/10/02 17:22:48 extra coverage: enabled 2022/10/02 17:22:48 setuid sandbox: enabled 2022/10/02 17:22:48 namespace sandbox: enabled 2022/10/02 17:22:48 Android sandbox: enabled 2022/10/02 17:22:48 fault injection: enabled 2022/10/02 17:22:48 leak checking: enabled 2022/10/02 17:22:48 net packet injection: enabled 2022/10/02 17:22:48 net device setup: enabled 2022/10/02 17:22:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 17:22:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 17:22:48 USB emulation: enabled 2022/10/02 17:22:48 hci packet injection: enabled 2022/10/02 17:22:48 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 17:22:48 802.15.4 emulation: enabled 2022/10/02 17:22:48 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 17:22:49 starting 8 fuzzer processes 17:22:49 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4004055) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000850}, 0x5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x10c, r3, 0xf02, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xa3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040040}, 0x20000800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) 17:22:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc89f301b7ac10559}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8055}, 0xc000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8044) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x40011) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000901}, 0x20000900) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xa000) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000740), r2) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x404c042) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r6) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20008810) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000c000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040801) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x81) 17:22:49 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x100}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e}}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/147, 0x93, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done, @exit_looper], 0x1b, 0x0, &(0x7f0000000340)="ca438329e5864db4a8f08aee0c8dc44db4bad86a6aedc5e11f0de2"}) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000003c0)={0xf7, 0x9, 0x1, 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x80000001, 0x9dc2}}, './file0/file0\x00'}) r2 = getpid() sched_getparam(r2, &(0x7f0000000440)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x258800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000004c0)={0x6, 0x0, 0x5, 0xfa, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x80802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001000), 0x410a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$CDROM_GET_MCN(r9, 0x5311, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 17:22:49 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x24000004) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0xb06, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x24}}, 0x48c0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc845) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = getpid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000006c0)={&(0x7f0000000640)=""/87, 0x57}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r7, 0xa12, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) 17:22:49 executing program 3: semget$private(0x0, 0x1, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2a}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24008042}, 0x4004) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0xfef8dc6c34395406}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r10, 0x404, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x24008040) [ 59.319042] audit: type=1400 audit(1664731369.559:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:22:49 executing program 5: ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x4, 0x6d, 0x81}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f00000001c0)={0x6, 0x3, 0xff, 0x77}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$CDROM_DEBUG(r1, 0x5330, 0x0) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000280)={0x3f, 0x1f, 0x3, 0x7f, 0x1, 0x6}) ioctl$CDROM_GET_MCN(r1, 0x5311, &(0x7f0000000d00)) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000d40)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$CDROMMULTISESSION(r3, 0x5310, &(0x7f0000000e40)={@lba=0x9, 0x0, 0x3}) 17:22:49 executing program 6: clock_getres(0x4, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x2, 0x6, 0x9, 0x4, 0xff, 0x34, 0x800, 0x8e2}, &(0x7f0000000080)={0x4, 0xcb0, 0x9, 0x7, 0x4, 0x5, 0x925}, &(0x7f00000000c0)={0x50, 0x101, 0x7ff, 0xfffffffffffffff9, 0x5, 0x7f, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) clock_gettime(0x1, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x5, 0x800}, {0x1, 0x4}], 0x2, &(0x7f0000000280)={r0, r1+10000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='(\\\x00', &(0x7f0000000300)='./file0\x00', r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x4, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0\x00'}) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000004c0)=@buf={0x4e, &(0x7f0000000440)="ca829275b46b7d5136cce2ed9a6fb5a313d8608d29d922cac08f491d663f3bf4887587c9e412d1cf29f83d37d9a7f1f6b7b6ff2c50e65a2a9522cd9de98926ff97500e4d0dc05ed9b47647811d41"}) clock_getres(0x0, &(0x7f0000000500)) semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000540)=0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000580)='(\\\x00', &(0x7f00000005c0)='./file0/file1\x00', r6) semget(0x3, 0x0, 0x180) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) r8 = semget$private(0x0, 0x1, 0x2) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000740)={{0x2, r3, r4, r3, r4, 0x100, 0x2}, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf32a}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, r3, r4, 0x58, 0x2}, 0x63fc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:22:49 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) r6 = getpid() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) [ 60.549959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.553056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.555156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.558400] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.560940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.562264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.567348] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.598181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.606042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.607752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.609218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.610686] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.611877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.613051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.614202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.615274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.616328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.617661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.618825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.627319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.629683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.630743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.631963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.633197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.634633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.637110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.638916] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.640271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.641708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.645690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.646828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.653708] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.657341] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.658295] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.664356] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.679857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.682701] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.685723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.688093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.707761] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.710340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 60.717338] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.723780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.725388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.726815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.729186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.730897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.732221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.736500] Bluetooth: hci5: HCI_REQ-0x0c1a [ 60.737051] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.743900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.745148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.747887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.749403] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.750791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.755312] Bluetooth: hci7: HCI_REQ-0x0c1a [ 62.629014] Bluetooth: hci0: command 0x0409 tx timeout [ 62.692610] Bluetooth: hci4: command 0x0409 tx timeout [ 62.693764] Bluetooth: hci2: command 0x0409 tx timeout [ 62.694888] Bluetooth: hci1: command 0x0409 tx timeout [ 62.695777] Bluetooth: hci3: command 0x0409 tx timeout [ 62.756610] Bluetooth: hci5: command 0x0409 tx timeout [ 62.757994] Bluetooth: hci6: command 0x0409 tx timeout [ 62.821679] Bluetooth: hci7: command 0x0409 tx timeout [ 64.677636] Bluetooth: hci0: command 0x041b tx timeout [ 64.741625] Bluetooth: hci3: command 0x041b tx timeout [ 64.742408] Bluetooth: hci1: command 0x041b tx timeout [ 64.743183] Bluetooth: hci2: command 0x041b tx timeout [ 64.744049] Bluetooth: hci4: command 0x041b tx timeout [ 64.804644] Bluetooth: hci6: command 0x041b tx timeout [ 64.805437] Bluetooth: hci5: command 0x041b tx timeout [ 64.869569] Bluetooth: hci7: command 0x041b tx timeout [ 66.724664] Bluetooth: hci0: command 0x040f tx timeout [ 66.788626] Bluetooth: hci4: command 0x040f tx timeout [ 66.789391] Bluetooth: hci2: command 0x040f tx timeout [ 66.790164] Bluetooth: hci1: command 0x040f tx timeout [ 66.790902] Bluetooth: hci3: command 0x040f tx timeout [ 66.852588] Bluetooth: hci5: command 0x040f tx timeout [ 66.853340] Bluetooth: hci6: command 0x040f tx timeout [ 66.916660] Bluetooth: hci7: command 0x040f tx timeout [ 68.773552] Bluetooth: hci0: command 0x0419 tx timeout [ 68.837586] Bluetooth: hci3: command 0x0419 tx timeout [ 68.838051] Bluetooth: hci1: command 0x0419 tx timeout [ 68.838448] Bluetooth: hci2: command 0x0419 tx timeout [ 68.838875] Bluetooth: hci4: command 0x0419 tx timeout [ 68.901669] Bluetooth: hci6: command 0x0419 tx timeout [ 68.902123] Bluetooth: hci5: command 0x0419 tx timeout [ 68.965590] Bluetooth: hci7: command 0x0419 tx timeout 17:23:46 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) r6 = getpid() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:23:46 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) r6 = getpid() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:23:46 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) r6 = getpid() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:23:47 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:23:47 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x100}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e}}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/147, 0x93, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done, @exit_looper], 0x1b, 0x0, &(0x7f0000000340)="ca438329e5864db4a8f08aee0c8dc44db4bad86a6aedc5e11f0de2"}) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000003c0)={0xf7, 0x9, 0x1, 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x80000001, 0x9dc2}}, './file0/file0\x00'}) r2 = getpid() sched_getparam(r2, &(0x7f0000000440)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x258800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000004c0)={0x6, 0x0, 0x5, 0xfa, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x80802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001000), 0x410a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$CDROM_GET_MCN(r9, 0x5311, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 17:23:47 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:23:47 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x100}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e}}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/147, 0x93, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done, @exit_looper], 0x1b, 0x0, &(0x7f0000000340)="ca438329e5864db4a8f08aee0c8dc44db4bad86a6aedc5e11f0de2"}) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000003c0)={0xf7, 0x9, 0x1, 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x80000001, 0x9dc2}}, './file0/file0\x00'}) r2 = getpid() sched_getparam(r2, &(0x7f0000000440)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x258800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000004c0)={0x6, 0x0, 0x5, 0xfa, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x80802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001000), 0x410a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$CDROM_GET_MCN(r9, 0x5311, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 17:23:47 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000380)=""/253) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) [ 122.026642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.034792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.038855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.042437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.044455] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.046353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.052331] Bluetooth: hci1: HCI_REQ-0x0c1a [ 122.314340] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.316399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.323135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.341873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.347820] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 122.350426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.359991] Bluetooth: hci6: HCI_REQ-0x0c1a [ 124.069823] Bluetooth: hci1: command 0x0409 tx timeout [ 124.132850] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 124.260545] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 124.324563] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 124.326186] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 124.388631] Bluetooth: hci6: command 0x0409 tx timeout [ 126.116647] Bluetooth: hci1: command 0x041b tx timeout [ 126.436513] Bluetooth: hci6: command 0x041b tx timeout [ 126.464329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.465732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.466363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.468323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.469710] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.470341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.473537] Bluetooth: hci3: HCI_REQ-0x0c1a [ 126.695853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.697694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.698399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.700029] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.700944] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.701727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.706571] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.707449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.708508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.709915] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.710900] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 126.711677] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.712284] Bluetooth: hci5: HCI_REQ-0x0c1a [ 126.717612] Bluetooth: hci7: HCI_REQ-0x0c1a [ 128.164760] Bluetooth: hci1: command 0x040f tx timeout [ 128.484609] Bluetooth: hci3: command 0x0409 tx timeout [ 128.485278] Bluetooth: hci6: command 0x040f tx timeout [ 128.612558] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 128.740569] Bluetooth: hci5: command 0x0409 tx timeout [ 128.804606] Bluetooth: hci7: command 0x0409 tx timeout [ 130.212539] Bluetooth: hci1: command 0x0419 tx timeout [ 130.532556] Bluetooth: hci6: command 0x0419 tx timeout [ 130.533030] Bluetooth: hci3: command 0x041b tx timeout [ 130.788519] Bluetooth: hci5: command 0x041b tx timeout [ 130.852523] Bluetooth: hci7: command 0x041b tx timeout [ 130.932091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.955719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.969976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.987764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.996355] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.997174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.014937] Bluetooth: hci4: HCI_REQ-0x0c1a [ 132.580597] Bluetooth: hci3: command 0x040f tx timeout [ 132.836563] Bluetooth: hci5: command 0x040f tx timeout [ 132.900566] Bluetooth: hci7: command 0x040f tx timeout [ 133.028733] Bluetooth: hci4: command 0x0409 tx timeout [ 134.628511] Bluetooth: hci3: command 0x0419 tx timeout [ 134.884583] Bluetooth: hci5: command 0x0419 tx timeout [ 134.948564] Bluetooth: hci7: command 0x0419 tx timeout [ 135.076525] Bluetooth: hci4: command 0x041b tx timeout [ 137.124511] Bluetooth: hci4: command 0x040f tx timeout [ 139.172705] Bluetooth: hci4: command 0x0419 tx timeout 17:24:53 executing program 5: ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x4, 0x6d, 0x81}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f00000001c0)={0x6, 0x3, 0xff, 0x77}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$CDROM_DEBUG(r1, 0x5330, 0x0) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000280)={0x3f, 0x1f, 0x3, 0x7f, 0x1, 0x6}) ioctl$CDROM_GET_MCN(r1, 0x5311, &(0x7f0000000d00)) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000d40)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$CDROMMULTISESSION(r3, 0x5310, &(0x7f0000000e40)={@lba=0x9, 0x0, 0x3}) 17:24:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc89f301b7ac10559}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8055}, 0xc000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8044) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x40011) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000901}, 0x20000900) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xa000) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000740), r2) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x404c042) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r6) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20008810) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000c000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040801) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x81) 17:24:53 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4004055) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000850}, 0x5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x10c, r3, 0xf02, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xa3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040040}, 0x20000800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) 17:24:53 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x100}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e}}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/147, 0x93, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done, @exit_looper], 0x1b, 0x0, &(0x7f0000000340)="ca438329e5864db4a8f08aee0c8dc44db4bad86a6aedc5e11f0de2"}) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000003c0)={0xf7, 0x9, 0x1, 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x80000001, 0x9dc2}}, './file0/file0\x00'}) r2 = getpid() sched_getparam(r2, &(0x7f0000000440)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x258800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000004c0)={0x6, 0x0, 0x5, 0xfa, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x80802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001000), 0x410a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$CDROM_GET_MCN(r9, 0x5311, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 17:24:53 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x6) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r5}) r6 = getpid() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:24:53 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x24000004) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0xb06, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x24}}, 0x48c0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc845) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = getpid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000006c0)={&(0x7f0000000640)=""/87, 0x57}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r7, 0xa12, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) 17:24:53 executing program 6: clock_getres(0x4, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x2, 0x6, 0x9, 0x4, 0xff, 0x34, 0x800, 0x8e2}, &(0x7f0000000080)={0x4, 0xcb0, 0x9, 0x7, 0x4, 0x5, 0x925}, &(0x7f00000000c0)={0x50, 0x101, 0x7ff, 0xfffffffffffffff9, 0x5, 0x7f, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) clock_gettime(0x1, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x5, 0x800}, {0x1, 0x4}], 0x2, &(0x7f0000000280)={r0, r1+10000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='(\\\x00', &(0x7f0000000300)='./file0\x00', r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x4, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0\x00'}) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000004c0)=@buf={0x4e, &(0x7f0000000440)="ca829275b46b7d5136cce2ed9a6fb5a313d8608d29d922cac08f491d663f3bf4887587c9e412d1cf29f83d37d9a7f1f6b7b6ff2c50e65a2a9522cd9de98926ff97500e4d0dc05ed9b47647811d41"}) clock_getres(0x0, &(0x7f0000000500)) semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000540)=0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000580)='(\\\x00', &(0x7f00000005c0)='./file0/file1\x00', r6) semget(0x3, 0x0, 0x180) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) r8 = semget$private(0x0, 0x1, 0x2) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000740)={{0x2, r3, r4, r3, r4, 0x100, 0x2}, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf32a}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, r3, r4, 0x58, 0x2}, 0x63fc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:24:53 executing program 3: semget$private(0x0, 0x1, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2a}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24008042}, 0x4004) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0xfef8dc6c34395406}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r10, 0x404, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x24008040) 17:24:53 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x100}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e}}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/147, 0x93, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done, @exit_looper], 0x1b, 0x0, &(0x7f0000000340)="ca438329e5864db4a8f08aee0c8dc44db4bad86a6aedc5e11f0de2"}) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000003c0)={0xf7, 0x9, 0x1, 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x80000001, 0x9dc2}}, './file0/file0\x00'}) r2 = getpid() sched_getparam(r2, &(0x7f0000000440)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x258800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000004c0)={0x6, 0x0, 0x5, 0xfa, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x80802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001000), 0x410a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$CDROM_GET_MCN(r8, 0x5311, &(0x7f00000010c0)) [ 183.716674] Bluetooth: hci0: command 0x0406 tx timeout [ 183.717554] Bluetooth: hci2: command 0x0406 tx timeout [ 187.812576] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.813187] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.813607] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.814163] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.814806] Call Trace: [ 187.815289] [ 187.815493] __schedule+0x893/0x2470 [ 187.815797] ? io_schedule_timeout+0x150/0x150 [ 187.816715] ? do_raw_spin_lock+0x121/0x260 [ 187.817054] ? rwlock_bug.part.0+0x90/0x90 [ 187.817797] schedule+0xda/0x1b0 [ 187.818076] rescuer_thread+0x851/0xdb0 [ 187.818395] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.818799] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.819177] ? lockdep_hardirqs_on+0x79/0x100 [ 187.819549] ? worker_thread+0x1260/0x1260 [ 187.819875] kthread+0x2ed/0x3a0 [ 187.820142] ? kthread_complete_and_exit+0x40/0x40 [ 187.820544] ret_from_fork+0x22/0x30 [ 187.820854] [ 187.821039] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.821550] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.821959] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.822551] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.823188] Call Trace: [ 187.823389] [ 187.823591] __schedule+0x893/0x2470 [ 187.823883] ? io_schedule_timeout+0x150/0x150 [ 187.824234] ? do_raw_spin_lock+0x121/0x260 [ 187.824586] ? rwlock_bug.part.0+0x90/0x90 [ 187.824921] schedule+0xda/0x1b0 [ 187.825189] rescuer_thread+0x851/0xdb0 [ 187.825523] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.825909] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.826304] ? lockdep_hardirqs_on+0x79/0x100 [ 187.826677] ? worker_thread+0x1260/0x1260 [ 187.827009] kthread+0x2ed/0x3a0 [ 187.827274] ? kthread_complete_and_exit+0x40/0x40 [ 187.827667] ret_from_fork+0x22/0x30 [ 187.827965] [ 187.828145] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.828661] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.829057] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.829647] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.830282] Call Trace: [ 187.830496] [ 187.830677] __schedule+0x893/0x2470 [ 187.830979] ? io_schedule_timeout+0x150/0x150 [ 187.831328] ? do_raw_spin_lock+0x121/0x260 [ 187.831683] ? rwlock_bug.part.0+0x90/0x90 [ 187.832021] schedule+0xda/0x1b0 [ 187.832290] rescuer_thread+0x851/0xdb0 [ 187.832620] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.833003] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.833388] ? lockdep_hardirqs_on+0x79/0x100 [ 187.833758] ? worker_thread+0x1260/0x1260 [ 187.834104] kthread+0x2ed/0x3a0 [ 187.834371] ? kthread_complete_and_exit+0x40/0x40 [ 187.834767] ret_from_fork+0x22/0x30 [ 187.835071] [ 187.835253] INFO: task netns:6 blocked for more than 143 seconds. [ 187.835723] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.836120] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.836706] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.837322] Call Trace: [ 187.837540] [ 187.837718] __schedule+0x893/0x2470 [ 187.838018] ? io_schedule_timeout+0x150/0x150 [ 187.838372] ? do_raw_spin_lock+0x121/0x260 [ 187.838719] ? rwlock_bug.part.0+0x90/0x90 [ 187.839058] schedule+0xda/0x1b0 [ 187.839324] rescuer_thread+0x851/0xdb0 [ 187.839650] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.840039] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.840429] ? lockdep_hardirqs_on+0x79/0x100 [ 187.840804] ? worker_thread+0x1260/0x1260 [ 187.841136] kthread+0x2ed/0x3a0 [ 187.841401] ? kthread_complete_and_exit+0x40/0x40 [ 187.841808] ret_from_fork+0x22/0x30 [ 187.842128] [ 187.842311] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 187.842827] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.843226] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.843816] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.844441] Workqueue: 0x0 (events) [ 187.844755] Call Trace: [ 187.844956] [ 187.845132] __schedule+0x893/0x2470 [ 187.845432] ? io_schedule_timeout+0x150/0x150 [ 187.845815] schedule+0xda/0x1b0 [ 187.846096] worker_thread+0x15f/0x1260 [ 187.846420] ? process_one_work+0x16a0/0x16a0 [ 187.846782] kthread+0x2ed/0x3a0 [ 187.847049] ? kthread_complete_and_exit+0x40/0x40 [ 187.847428] ret_from_fork+0x22/0x30 [ 187.847750] [ 187.847933] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.848420] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.848831] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.849401] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 187.850049] Workqueue: 0x0 (events_highpri) [ 187.850404] Call Trace: [ 187.850625] [ 187.850805] __schedule+0x893/0x2470 [ 187.851106] ? io_schedule_timeout+0x150/0x150 [ 187.851492] schedule+0xda/0x1b0 [ 187.851760] worker_thread+0x15f/0x1260 [ 187.852083] ? process_one_work+0x16a0/0x16a0 [ 187.852440] kthread+0x2ed/0x3a0 [ 187.852729] ? kthread_complete_and_exit+0x40/0x40 [ 187.853109] ret_from_fork+0x22/0x30 [ 187.853412] [ 187.853613] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.854119] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.854541] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.855113] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.855769] Call Trace: [ 187.855966] [ 187.856143] __schedule+0x893/0x2470 [ 187.856437] ? io_schedule_timeout+0x150/0x150 [ 187.856813] ? do_raw_spin_lock+0x121/0x260 [ 187.857145] ? rwlock_bug.part.0+0x90/0x90 [ 187.857497] schedule+0xda/0x1b0 [ 187.857766] rescuer_thread+0x851/0xdb0 [ 187.858080] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.858485] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.858875] ? lockdep_hardirqs_on+0x79/0x100 [ 187.859222] ? worker_thread+0x1260/0x1260 [ 187.859573] kthread+0x2ed/0x3a0 [ 187.859840] ? kthread_complete_and_exit+0x40/0x40 [ 187.860216] ret_from_fork+0x22/0x30 [ 187.860531] [ 187.860715] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.861234] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.861650] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.862233] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.862874] Call Trace: [ 187.863072] [ 187.863252] __schedule+0x893/0x2470 [ 187.863567] ? io_schedule_timeout+0x150/0x150 [ 187.863922] ? mark_held_locks+0x9e/0xe0 [ 187.864234] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.864641] schedule+0xda/0x1b0 [ 187.864909] rcu_tasks_one_gp+0x3db/0xc10 [ 187.865250] rcu_tasks_kthread+0x80/0xa0 [ 187.865584] ? rcu_tasks_postscan+0x10/0x10 [ 187.865918] kthread+0x2ed/0x3a0 [ 187.866188] ? kthread_complete_and_exit+0x40/0x40 [ 187.866582] ret_from_fork+0x22/0x30 [ 187.866885] [ 187.867066] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.867584] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.867983] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.868562] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 187.869204] Workqueue: 0x0 (rcu_gp) [ 187.869517] Call Trace: [ 187.869713] [ 187.869890] __schedule+0x893/0x2470 [ 187.870202] ? io_schedule_timeout+0x150/0x150 [ 187.870590] schedule+0xda/0x1b0 [ 187.870861] worker_thread+0x15f/0x1260 [ 187.871185] ? process_one_work+0x16a0/0x16a0 [ 187.871564] kthread+0x2ed/0x3a0 [ 187.871828] ? kthread_complete_and_exit+0x40/0x40 [ 187.872207] ret_from_fork+0x22/0x30 [ 187.872529] [ 187.872708] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.873206] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.873625] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.874199] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 187.874846] Workqueue: 0x0 (kblockd) [ 187.875141] Call Trace: [ 187.875340] [ 187.875536] __schedule+0x893/0x2470 [ 187.875833] ? io_schedule_timeout+0x150/0x150 [ 187.876194] schedule+0xda/0x1b0 [ 187.876481] worker_thread+0x15f/0x1260 [ 187.876807] ? process_one_work+0x16a0/0x16a0 [ 187.877164] kthread+0x2ed/0x3a0 [ 187.877428] ? kthread_complete_and_exit+0x40/0x40 [ 187.877822] ret_from_fork+0x22/0x30 [ 187.878135] [ 187.878361] [ 187.878361] Showing all locks held in the system: [ 187.878846] 1 lock held by rcu_tasks_kthre/11: [ 187.879192] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.879947] 1 lock held by khungtaskd/25: [ 187.880251] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.880968] 1 lock held by in:imklog/188: [ 187.881279] #0: ffff88800d3e1268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 187.881943] 2 locks held by syz-executor/6647: [ 187.882291] [ 187.882425] ============================================= [ 187.882425] 17:25:05 executing program 5: ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x4, 0x6d, 0x81}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f00000001c0)={0x6, 0x3, 0xff, 0x77}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$CDROM_DEBUG(r1, 0x5330, 0x0) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000280)={0x3f, 0x1f, 0x3, 0x7f, 0x1, 0x6}) ioctl$CDROM_GET_MCN(r1, 0x5311, &(0x7f0000000d00)) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000d40)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$CDROMMULTISESSION(r3, 0x5310, &(0x7f0000000e40)={@lba=0x9, 0x0, 0x3}) 17:25:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc89f301b7ac10559}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8055}, 0xc000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8044) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x40011) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000901}, 0x20000900) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xa000) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000740), r2) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x404c042) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r6) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20008810) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000c000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040801) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x81) 17:25:05 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x100}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e}}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/147, 0x93, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done, @exit_looper], 0x1b, 0x0, &(0x7f0000000340)="ca438329e5864db4a8f08aee0c8dc44db4bad86a6aedc5e11f0de2"}) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000003c0)={0xf7, 0x9, 0x1, 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x80000001, 0x9dc2}}, './file0/file0\x00'}) r2 = getpid() sched_getparam(r2, &(0x7f0000000440)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x258800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000004c0)={0x6, 0x0, 0x5, 0xfa, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x80802, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001000), 0x410a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 17:25:05 executing program 3: semget$private(0x0, 0x1, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2a}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24008042}, 0x4004) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0xfef8dc6c34395406}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r10, 0x404, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x24008040) 17:25:05 executing program 7: clock_getres(0x2, &(0x7f0000000000)) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xf800, 0x1000}, {0x2, 0xff7f, 0x1000}, {0x1, 0xdccb}, {0x0, 0xd499, 0x2000}], 0x5, &(0x7f0000000080)={0x0, 0x989680}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x300) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000000c0)=""/187) r1 = semget$private(0x0, 0x3, 0x429) r2 = semget(0x0, 0x1, 0x40) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000180)) r3 = semget(0x2, 0x0, 0x10) clock_getres(0x1, &(0x7f00000001c0)) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x9, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x4, 0x80, 0xbf4, 0x1f]) semop(r1, &(0x7f00000002c0)=[{0x5, 0x2}, {0x3, 0x4, 0x1800}, {0x3, 0x0, 0x800}], 0x3) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000300)=0x4) fsmount(0xffffffffffffffff, 0x0, 0x6) getpid() r4 = getpid() ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000004c0)={&(0x7f0000000480)=""/49, 0x31}) 17:25:05 executing program 6: clock_getres(0x4, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x2, 0x6, 0x9, 0x4, 0xff, 0x34, 0x800, 0x8e2}, &(0x7f0000000080)={0x4, 0xcb0, 0x9, 0x7, 0x4, 0x5, 0x925}, &(0x7f00000000c0)={0x50, 0x101, 0x7ff, 0xfffffffffffffff9, 0x5, 0x7f, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) clock_gettime(0x1, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x5, 0x800}, {0x1, 0x4}], 0x2, &(0x7f0000000280)={r0, r1+10000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='(\\\x00', &(0x7f0000000300)='./file0\x00', r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x4, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0\x00'}) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000004c0)=@buf={0x4e, &(0x7f0000000440)="ca829275b46b7d5136cce2ed9a6fb5a313d8608d29d922cac08f491d663f3bf4887587c9e412d1cf29f83d37d9a7f1f6b7b6ff2c50e65a2a9522cd9de98926ff97500e4d0dc05ed9b47647811d41"}) clock_getres(0x0, &(0x7f0000000500)) semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000540)=0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000580)='(\\\x00', &(0x7f00000005c0)='./file0/file1\x00', r6) semget(0x3, 0x0, 0x180) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) r8 = semget$private(0x0, 0x1, 0x2) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000740)={{0x2, r3, r4, r3, r4, 0x100, 0x2}, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf32a}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, r3, r4, 0x58, 0x2}, 0x63fc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:25:05 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x24000004) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0xb06, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x24}}, 0x48c0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc845) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = getpid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000006c0)={&(0x7f0000000640)=""/87, 0x57}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r7, 0xa12, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) 17:25:05 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4004055) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000850}, 0x5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x10c, r3, 0xf02, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xa3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040040}, 0x20000800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) 17:25:05 executing program 3: semget$private(0x0, 0x1, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2a}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24008042}, 0x4004) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0xfef8dc6c34395406}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r10, 0x404, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x24008040) VM DIAGNOSIS: 17:24:58 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000022 RCX=ffffffff8129c0db RDX=fffffbfff0d9a6f9 RSI=0000000000000008 RDI=ffffffff86cd37c0 RBP=ffff88800df60a62 RSP=ffff8880184571d0 R8 =0000000000000000 R9 =ffffffff86cd37c7 R10=fffffbfff0d9a6f8 R11=0000000000000001 R12=ffff88800df60000 R13=ffff88800df60a40 R14=ffff88800df60978 R15=dffffc0000000000 RIP=ffffffff8129c0e3 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6259e49700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb799592830 CR3=000000000f2f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2038353a34323a37 312032202074634f YMM01=0000000000000000 0000000000000000 5d3339343531382e 37383120205b203a YMM02=0000000000000000 0000000000000000 7564656863735f5f 20205d3339343531 YMM03=0000000000000000 0000000000000000 2072656c6c616b7a 79732038353a3432 YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d333631343138 2e37383120205b20 YMM07=0000000000000000 0000000000000000 732038353a34323a 3731203220207463 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc1efc9080 CR3=000000001b332000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 40f1df0000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 3239383965643964 6332323539613261 YMM14=0000000000000000 0000000000000000 3530636430643465 3030353739666636 YMM15=0000000000000000 0000000000000000 2231346431313837 3436373462396465