Warning: Permanently added '[localhost]:49413' (ECDSA) to the list of known hosts. 2025/04/23 10:33:41 fuzzer started 2025/04/23 10:33:41 dialing manager at localhost:42253 syzkaller login: [ 99.378493] cgroup: Unknown subsys name 'net' [ 99.519951] cgroup: Unknown subsys name 'cpuset' [ 99.566787] cgroup: Unknown subsys name 'rlimit' 2025/04/23 10:33:56 syscalls: 203 2025/04/23 10:33:56 code coverage: enabled 2025/04/23 10:33:56 comparison tracing: enabled 2025/04/23 10:33:56 extra coverage: enabled 2025/04/23 10:33:56 setuid sandbox: enabled 2025/04/23 10:33:56 namespace sandbox: enabled 2025/04/23 10:33:56 Android sandbox: enabled 2025/04/23 10:33:56 fault injection: enabled 2025/04/23 10:33:56 leak checking: enabled 2025/04/23 10:33:56 net packet injection: enabled 2025/04/23 10:33:56 net device setup: enabled 2025/04/23 10:33:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 10:33:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 10:33:56 USB emulation: enabled 2025/04/23 10:33:56 hci packet injection: enabled 2025/04/23 10:33:56 wifi device emulation: enabled 2025/04/23 10:33:56 802.15.4 emulation: enabled 2025/04/23 10:33:56 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 10:33:57 starting 8 fuzzer processes 10:33:57 executing program 0: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba56a51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eedac14}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68985998}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e0a2a33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x432afba1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x404c001}, 0x24004081) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20009000}, 0x4000001) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x20}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r4) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x9808}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044085}, 0x1) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x144, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x8fb21fd20285b981}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58dafccc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x122330e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58539384}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc382}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x111e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xafb5a9a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6260b8df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe62f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd4431f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x770665f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9a48c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3360fbef}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa100}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x640c3e87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x424cda19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d690805}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41e0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22e62780}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f98419a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x337bbb0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d784de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b9db4b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9534}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000005}, 0x4890) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x13c, r3, 0xb02, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xd8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) 10:33:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x200880) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000040)=0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash}]}}) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000200)) r2 = socket(0x21, 0x5, 0xffffffe1) r3 = signalfd4(r2, &(0x7f0000000240)={[0x4]}, 0x8, 0x0) r4 = socket(0x3, 0x800, 0x9) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0x7f, 0x1f, 0x6, 0x72, @mcast1, @mcast2, 0x20, 0x10, 0x10000, 0xfffff800}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x29, 0x5, 0x8, 0x7c2a, 0x4e, @empty, @private0, 0x8, 0x1, 0x7, 0x9}}) r6 = syz_open_dev$vcsu(&(0x7f0000000400), 0x0, 0x2) ioctl$CDROMPLAYTRKIND(r6, 0x5304, &(0x7f0000000440)={0x1f, 0x4, 0x1, 0x4}) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f0000000480)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x8010, r3, 0xad5db000) ioctl$CDROMVOLCTRL(r6, 0x530a, &(0x7f0000000f00)={0x1f, 0xff, 0x0, 0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/class/scsi_generic', 0x0, 0x40) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000f80)={0x0, 0x4, 0x9a, 0x20, 0xff, 0x1f}) mount$9p_fd(0x0, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40), 0xc00, &(0x7f0000001a80)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@privport}, {@afid={'afid', 0x3d, 0x3}}], [{@obj_type={'obj_type', 0x3d, '{H[{'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute}]}}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004001) 10:33:57 executing program 2: ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) r0 = semget$private(0x0, 0x2, 0x600) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000040)=""/185) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = semget$private(0x0, 0x0, 0x2) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000240)=""/251) r3 = semget$private(0x0, 0x3, 0x200) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000340)=""/109) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/virtio_pci_modern_dev', 0x8202, 0x1) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) r5 = semget$private(0x0, 0x0, 0x100) r6 = getgid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000500)={{0x2, 0xffffffffffffffff, r6, 0xee00, 0xee01, 0x3c, 0x7ff}, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}) r7 = semget$private(0x0, 0x6, 0x8) semctl$GETNCNT(r7, 0x2, 0xe, &(0x7f0000000580)=""/4096) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001600)={0x380, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38763f2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x776ad453}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x751c3ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c7fa5bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c0467c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f7fb650}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x559dcdfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69e1d984}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1373f37f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1ac, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9632}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6072}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688a2f17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f31961}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7ba}]}, {0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1663}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2623d64b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a97534}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x192f581b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf978}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x367e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x539bbfd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73f96811}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1536e5c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4564547a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f2f789}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55d92f82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1eae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27485cfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50e2721d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3468}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37e6d68e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c544457}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaef}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf9c01b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c37536}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1007b4b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80000001}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x449c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51410cba}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1647}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa12e30a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc4cb564}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc890}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x728c2521}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e8e3fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17063a45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64b09e70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x476d519a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x172f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21d6e13b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf905569}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x743c1c10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x414d7ef7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4580048e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7364b985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3ec849}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d93}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ba5a626}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c599a90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfddc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x170d4226}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee35ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9760cc4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8200}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe179}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12cb}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e84be26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x111f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f615744}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41533227}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13ba0fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5172}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x199cd537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa111}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x472f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf237}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x161f8034}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x335db94d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x604fa441}]}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000001a00)={0x7, 0x3, 0x1ff, 0x2, 0x3ff, 0x3ff}) 10:33:57 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x18) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:dmidecode_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10c0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x4]}, 0x8, 0x80000) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f00000002c0)) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000300)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe5c5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000004c0)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\\#$[\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xf436f48547c2e8b6}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4845) ioctl$CDROMCLOSETRAY(r0, 0x5319) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x100, 0x0) ioctl$CDROMPAUSE(r2, 0x5301) r3 = signalfd4(r2, &(0x7f0000000680)={[0x100000001]}, 0x8, 0x800) ioctl$CDROMRESUME(r3, 0x5302) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x7fff, 0x80000) ioctl$CDROM_CLEAR_OPTIONS(r4, 0x5321, 0x11) ioctl$CDROM_NEXT_WRITABLE(r2, 0x5394, &(0x7f0000000700)) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000000) [ 115.417878] audit: type=1400 audit(1745404437.869:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:33:57 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x1, 0x12, 0xba, 0x9, 0x88, 0x1, 0x8}, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x3b0d, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x2f, 0x1d1, 0x6c, @empty, @mcast1, 0x10, 0x27, 0x238, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x4, 0x4, 0x7, 0x100, 0x12, @empty, @private0, 0x8000, 0x0, 0x7, 0x400}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x9, @any, 0x9}, 0xe) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3d4, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1b8, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27480fe6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x703d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9313}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66ebc6be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ab1bdcf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2935}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2953}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4eeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x569e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf559}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x551bc4c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fce0739}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe477}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb4c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e7756a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa904283}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4429}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44836455}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3920b86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ee1e7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd23}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77584c02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f7b65ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1efc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa7a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13f243cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a3e513c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1873665e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6beb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x727c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x476d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5200}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc67b}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe090}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x208fddce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6181}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x612bc118}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f297f21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3970435e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1893c506}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd581}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cf8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b8c2efc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c649589}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c6672cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7b6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6820f2d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c815dc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2879d5d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0ad}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1da57c45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc908}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d9450ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21580753}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc34c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf63f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55a9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3be941}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb07}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63c8fdd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df7e676}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26dbb29e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8be7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe0babd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcce3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb794}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6514}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fbdc58}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4784ef44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf126}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d38dd92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe41e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe55b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x81f8d72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ba4d694}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d4fc78d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52fcc4de}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x682616e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x691ce9f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3395024b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf257}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', r3, 0x4, 0x9, 0x3, 0x7, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x80, 0x20, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'sit0\x00', r8, 0x29, 0x4, 0x9, 0x6, 0x5, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x10, 0x80, 0x10001, 0x7}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0xe6850) fgetxattr(r1, &(0x7f0000000d00)=@random={'security.', '*:]\x00'}, &(0x7f0000000d40)=""/189, 0xbd) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000e00)={0x8001, "d5f65d"}, 0x6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xa2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80), 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x6c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2e}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x6c}}, 0x4050080) 10:33:57 executing program 5: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x40, 0x4) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0xdb9, 0x6]) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000080)) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x45a800) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x8000, 0x6, 0x2, 0x9, 0x800, 0x20}) r1 = signalfd(r0, &(0x7f0000000140)={[0x7f]}, 0x8) ioctl$CDROM_GET_MCN(r1, 0x5311, &(0x7f0000000180)) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x80) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000200)=0x10, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r3, 0x3, r4, 0x7ff, 0x80000}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r5, 0x6137f000) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000340)=""/148) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0xb00, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xd}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x80) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x1, 0x10801) r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@access_client}, {@access_client}], [{@dont_appraise}, {@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/rtc0\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/input/event#\x00'}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_eq}]}}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000840)={0x5, 0x8f, &(0x7f0000000780)="07455a6e44507be5fe25dba0fdf17cc212f2cc25f64fe7ac768570d6e57f1b14f392797138e96ed7a30cb845bcce0aaa08294d2af4e76dfc139b5c8b5df1f4a31d17e80ac0e1a5f366fccc120089e5a4c331a7b43ebbd1dc91e15f7e43333126d50ab9f69c6095e339c98c008fb1639f1cd4a7ebe0fa1dc95c5562d5774fbd98020a21bb424bd8de82ea02a29515bf"}) 10:33:57 executing program 6: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x341a00, 0x0) ioctl$CDROMRESET(r0, 0x5312) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x9, 0x1}) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000200)={"290624ce134d048b5b43e84c", &(0x7f0000000080)="b60a123bc91910639adf89d403ac30c7127ad91255c884b0c7d03166f44d35b8e3315426923dae19a4369d2e217e9225103804dc0d199bc0ff51d6cea5cef73f362836f220720bda8749b44bc467f1ea73fe7d21b7c8016b3088f5e09b58e51121b50457185ef20b59658eb5123b5a13f2bb3fedbd16aba5a5c936e2c89f7bcf300771ea7cb7aaa9e5bdb58fca0e8275acb46a7b564547021807f81eb400dcf419c1b48f3cf20c2e665406f2758691bc0ac5719cd09b334326eed492a8269893727cf405bda624f93edfddaced96abdebd6ae8a2269d62", 0xd7, 0x8e, &(0x7f0000000180)={0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, "29443ee1", 0xff, "de7fb391", 0x9f, 0x40, 0x0, "abc7eb", "503af2a78edba8851bd9998f81c738dd70c59c391525e089279b37a38a433837843b2f0ddb028ec7fb3b80766ad3"}, 0x0, 0xa3e, 0x2, &(0x7f00000001c0)}) r1 = signalfd(r0, &(0x7f0000000240)={[0x20]}, 0x8) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x8, "80e15f"}, 0x6) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f00000002c0)={0xff, 0x0, 0x2, 0x1}) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x4b) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x10) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f0000000340)) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000380)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/module/iosf_mbi', 0x220002, 0xb4) ioctl$CDROMEJECT(r2, 0x5309) ioctl$CDROM_DISC_STATUS(r1, 0x5327) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CDROM_DISC_STATUS(r1, 0x5327) ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x14) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000e40)) 10:33:58 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/127) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/88) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1f, 0x2001) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/107) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/acpi', 0x200, 0x50) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000240)=0x1) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000280)={0x7f, 0x4, 0x20, 0x80000000, 0xff, 0x3c7c}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000002c0)=""/245) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000003c0)=""/204) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000004c0)={0x2, 0x4, 0x0, 0x3, 0x8001, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2d, 0x3, 0xff, 0x2, 0x40, @mcast1, @empty, 0x7, 0x40, 0x2eb, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x2f, 0xff, 0x2, 0x3, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x7, 0x5, 0xfff}}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$evdev(&(0x7f0000000780), 0xffffffffffffffca, 0x422400) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c084}, 0x845) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000a40)={0x42, 0x81, 0x87, 0x9, 0x1}) [ 116.883846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.886998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.889635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.898510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.904472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.967429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.971909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.974850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.980705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.992504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.993782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.998047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.002539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.007368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.015740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.018444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.034379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.039599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.051498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.054272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.061127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.063664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.069329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.081386] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 117.081723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.087371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 117.089709] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 117.094030] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.099985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 117.102370] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.102963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.108041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.111755] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.121561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.129314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.147741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.149245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.177743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.180742] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.202952] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.968282] Bluetooth: hci0: command tx timeout [ 119.158482] Bluetooth: hci2: command tx timeout [ 119.159407] Bluetooth: hci1: command tx timeout [ 119.223271] Bluetooth: hci3: command tx timeout [ 119.223985] Bluetooth: hci5: command tx timeout [ 119.224604] Bluetooth: hci7: command tx timeout [ 119.288045] Bluetooth: hci6: command tx timeout [ 119.288507] Bluetooth: hci4: command tx timeout [ 121.014535] Bluetooth: hci0: command tx timeout [ 121.207244] Bluetooth: hci1: command tx timeout [ 121.207443] Bluetooth: hci2: command tx timeout [ 121.270249] Bluetooth: hci7: command tx timeout [ 121.270424] Bluetooth: hci5: command tx timeout [ 121.270707] Bluetooth: hci3: command tx timeout [ 121.334301] Bluetooth: hci6: command tx timeout [ 121.334335] Bluetooth: hci4: command tx timeout [ 123.063502] Bluetooth: hci0: command tx timeout [ 123.254824] Bluetooth: hci2: command tx timeout [ 123.255355] Bluetooth: hci1: command tx timeout [ 123.320595] Bluetooth: hci3: command tx timeout [ 123.320691] Bluetooth: hci5: command tx timeout [ 123.321279] Bluetooth: hci7: command tx timeout [ 123.382211] Bluetooth: hci6: command tx timeout [ 123.382667] Bluetooth: hci4: command tx timeout [ 125.110727] Bluetooth: hci0: command tx timeout [ 125.303239] Bluetooth: hci2: command tx timeout [ 125.303731] Bluetooth: hci1: command tx timeout [ 125.367486] Bluetooth: hci3: command tx timeout [ 125.367955] Bluetooth: hci5: command tx timeout [ 125.369293] Bluetooth: hci7: command tx timeout [ 125.430446] Bluetooth: hci6: command tx timeout [ 125.430899] Bluetooth: hci4: command tx timeout [ 176.821892] syz-executor.0 (280) used greatest stack depth: 25144 bytes left [ 177.097158] syz-executor.5 (283) used greatest stack depth: 24888 bytes left [ 178.949312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.954061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.956703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.966846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.974827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.023292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.026487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.027879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.033581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.036443] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.100338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.104200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.109377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.118929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.124723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.222115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.245380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.246916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.248850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.252584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.258500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.282226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.283717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.286631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.297863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.327557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.330217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.333684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.338286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.347474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.440919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.450580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.452869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.471768] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.478013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.213851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.238601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.241730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.244360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.252074] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.046541] Bluetooth: hci0: command tx timeout [ 181.111272] Bluetooth: hci1: command tx timeout [ 181.176226] Bluetooth: hci2: command tx timeout [ 181.366259] Bluetooth: hci5: command tx timeout [ 181.367636] Bluetooth: hci3: command tx timeout [ 181.686241] Bluetooth: hci4: command tx timeout [ 181.879350] Bluetooth: hci6: command tx timeout [ 182.390212] Bluetooth: hci7: command tx timeout [ 183.094616] Bluetooth: hci0: command tx timeout [ 183.160189] Bluetooth: hci1: command tx timeout [ 183.222251] Bluetooth: hci2: command tx timeout [ 183.414264] Bluetooth: hci3: command tx timeout [ 183.414764] Bluetooth: hci5: command tx timeout [ 183.735266] Bluetooth: hci4: command tx timeout [ 183.927262] Bluetooth: hci6: command tx timeout [ 184.438399] Bluetooth: hci7: command tx timeout [ 185.142249] Bluetooth: hci0: command tx timeout [ 185.206499] Bluetooth: hci1: command tx timeout [ 185.270644] Bluetooth: hci2: command tx timeout [ 185.463245] Bluetooth: hci3: command tx timeout [ 185.463746] Bluetooth: hci5: command tx timeout [ 185.782440] Bluetooth: hci4: command tx timeout [ 185.976183] Bluetooth: hci6: command tx timeout [ 186.486221] Bluetooth: hci7: command tx timeout [ 187.190244] Bluetooth: hci0: command tx timeout [ 187.254484] Bluetooth: hci1: command tx timeout [ 187.318220] Bluetooth: hci2: command tx timeout [ 187.510269] Bluetooth: hci5: command tx timeout [ 187.510769] Bluetooth: hci3: command tx timeout [ 187.830224] Bluetooth: hci4: command tx timeout [ 188.022255] Bluetooth: hci6: command tx timeout [ 188.534217] Bluetooth: hci7: command tx timeout [ 241.361226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.362830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.363986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.367413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.372093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.376508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.384693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.389541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.422646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.425716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.569200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.572166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.574305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.582973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.586595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.774713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.782619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.784393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.792603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.795370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.806715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.809989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.811602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.812832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.814552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.820775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.822072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.826979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.831998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.836798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.855838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.866591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.877808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.878358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.892512] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.897886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.904307] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.909381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.944982] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.959829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.382428] Bluetooth: hci1: command tx timeout [ 243.510433] Bluetooth: hci0: command tx timeout [ 243.640916] Bluetooth: hci2: command tx timeout [ 243.894224] Bluetooth: hci4: command tx timeout [ 243.958317] Bluetooth: hci3: command tx timeout [ 244.022394] Bluetooth: hci5: command tx timeout [ 244.023366] Bluetooth: hci7: command tx timeout [ 244.086268] Bluetooth: hci6: command tx timeout [ 245.430345] Bluetooth: hci1: command tx timeout [ 245.558811] Bluetooth: hci0: command tx timeout [ 245.686336] Bluetooth: hci2: command tx timeout [ 245.942394] Bluetooth: hci4: command tx timeout [ 246.006830] Bluetooth: hci3: command tx timeout [ 246.073106] Bluetooth: hci5: command tx timeout [ 246.075675] Bluetooth: hci7: command tx timeout [ 246.134697] Bluetooth: hci6: command tx timeout [ 247.478392] Bluetooth: hci1: command tx timeout [ 247.606455] Bluetooth: hci0: command tx timeout [ 247.734219] Bluetooth: hci2: command tx timeout [ 247.990248] Bluetooth: hci4: command tx timeout [ 248.055277] Bluetooth: hci3: command tx timeout [ 248.119462] Bluetooth: hci5: command tx timeout [ 248.119925] Bluetooth: hci7: command tx timeout [ 248.182279] Bluetooth: hci6: command tx timeout [ 249.526391] Bluetooth: hci1: command tx timeout [ 249.654202] Bluetooth: hci0: command tx timeout [ 249.782335] Bluetooth: hci2: command tx timeout [ 250.038211] Bluetooth: hci4: command tx timeout [ 250.102774] Bluetooth: hci3: command tx timeout [ 250.166355] Bluetooth: hci7: command tx timeout [ 250.166795] Bluetooth: hci5: command tx timeout [ 250.230212] Bluetooth: hci6: command tx timeout [ 303.701906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.705876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.724711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.738197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.742556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.884830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.889802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.896609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.907680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.911921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.961204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.968870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.972881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.986379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.002058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.019005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.025656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.029667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.051460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.055010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.234286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.240334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.246758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.249097] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.265700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.276507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.285639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.294514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.302613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.304360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.307741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.312465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.313864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.320474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.333196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.334874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.344580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.346499] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.367740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.400796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.782224] Bluetooth: hci0: command tx timeout [ 305.975363] Bluetooth: hci1: command tx timeout [ 306.039212] Bluetooth: hci2: command tx timeout [ 306.103274] Bluetooth: hci3: command tx timeout [ 306.423219] Bluetooth: hci7: command tx timeout [ 306.488190] Bluetooth: hci4: command tx timeout [ 306.488235] Bluetooth: hci6: command tx timeout [ 306.551668] Bluetooth: hci5: command tx timeout [ 307.834213] Bluetooth: hci0: command tx timeout [ 308.022553] Bluetooth: hci1: command tx timeout [ 308.088167] Bluetooth: hci2: command tx timeout [ 308.151197] Bluetooth: hci3: command tx timeout [ 308.470646] Bluetooth: hci7: command tx timeout [ 308.534487] Bluetooth: hci4: command tx timeout [ 308.534532] Bluetooth: hci6: command tx timeout [ 308.598306] Bluetooth: hci5: command tx timeout [ 309.878237] Bluetooth: hci0: command tx timeout [ 310.071174] Bluetooth: hci1: command tx timeout [ 310.134321] Bluetooth: hci2: command tx timeout [ 310.198192] Bluetooth: hci3: command tx timeout [ 310.518493] Bluetooth: hci7: command tx timeout [ 310.582433] Bluetooth: hci4: command tx timeout [ 310.583243] Bluetooth: hci6: command tx timeout [ 310.646593] Bluetooth: hci5: command tx timeout [ 311.926253] Bluetooth: hci0: command tx timeout [ 312.118212] Bluetooth: hci1: command tx timeout [ 312.185150] Bluetooth: hci2: command tx timeout [ 312.246230] Bluetooth: hci3: command tx timeout [ 312.568367] Bluetooth: hci7: command tx timeout [ 312.630480] Bluetooth: hci6: command tx timeout [ 312.630562] Bluetooth: hci4: command tx timeout [ 312.695187] Bluetooth: hci5: command tx timeout [ 363.765046] syz-executor.2 (8000) used greatest stack depth: 24720 bytes left [ 366.157585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.163588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.166574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.190575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.196911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.486752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.508460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.510958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.523503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.534590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.541698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.544543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.549702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.552030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.555018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.556809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.566415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.569373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.583067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.590737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.692757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.699222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.705741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.715613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.755014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.780075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.785104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.787207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.809909] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.811871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.815418] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.823392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.846282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.848828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.854317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.856559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.859059] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.866450] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.884821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.959672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.247200] Bluetooth: hci0: command tx timeout [ 368.632581] Bluetooth: hci3: command tx timeout [ 368.634219] Bluetooth: hci1: command tx timeout [ 368.822305] Bluetooth: hci2: command tx timeout [ 368.823617] Bluetooth: hci4: command tx timeout [ 368.950271] Bluetooth: hci5: command tx timeout [ 369.014444] Bluetooth: hci6: command tx timeout [ 369.078387] Bluetooth: hci7: command tx timeout [ 370.294309] Bluetooth: hci0: command tx timeout [ 370.678309] Bluetooth: hci1: command tx timeout [ 370.678609] Bluetooth: hci3: command tx timeout [ 370.870291] Bluetooth: hci4: command tx timeout [ 370.870915] Bluetooth: hci2: command tx timeout [ 370.998220] Bluetooth: hci5: command tx timeout [ 371.063460] Bluetooth: hci6: command tx timeout [ 371.128330] Bluetooth: hci7: command tx timeout [ 372.342272] Bluetooth: hci0: command tx timeout [ 372.726491] Bluetooth: hci1: command tx timeout [ 372.726530] Bluetooth: hci3: command tx timeout [ 372.918346] Bluetooth: hci2: command tx timeout [ 372.919392] Bluetooth: hci4: command tx timeout [ 373.046194] Bluetooth: hci5: command tx timeout [ 373.110388] Bluetooth: hci6: command tx timeout [ 373.175220] Bluetooth: hci7: command tx timeout [ 374.390311] Bluetooth: hci0: command tx timeout [ 374.774273] Bluetooth: hci1: command tx timeout [ 374.774758] Bluetooth: hci3: command tx timeout [ 374.967167] Bluetooth: hci4: command tx timeout [ 374.967216] Bluetooth: hci2: command tx timeout [ 375.094217] Bluetooth: hci5: command tx timeout [ 375.160486] Bluetooth: hci6: command tx timeout [ 375.222477] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:38:59 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888023ac8000 RCX=0000000000020000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1ba80 RBP=0000000000000000 RSP=ffff88800ee6f2d8 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=000000000002310f R12=ffff888023ac8a80 R13=0000000000020005 R14=0000000000000000 R15=ffff888023ac8a58 RIP=ffffffff81516575 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6c00f27540 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe35eb528e0 CR3=000000003039e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=00ff0000000001002e6f732e6362696c XMM02=312e312e6f732e6f747079726362696c XMM03=00000000000000000000000000000000 XMM04=000000000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff867f37c3 RBX=0000000000000001 RCX=ffffffff867f37be RDX=0000000000000000 RSI=1ffffffff0cfe6f8 RDI=ffffffff86498144 RBP=ffff88803134f848 RSP=ffff88803134f780 R8 =ffffffff867f37be R9 =0000000000000001 R10=000000000003b0b4 R11=0000000000012ac3 R12=ffff88803134f850 R13=ffff88803134f838 R14=ffff88803134f831 R15=ffff88803134f7f0 RIP=ffffffff81350c35 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f21085c080 CR3=000000002eed6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff000000000000ff000000 XMM02=0000000000ff00000000000000000000 XMM03=0000000000ff00000000000000000000 XMM04=00000000ff000000000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000