Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 90.449212] sshd (236) used greatest stack depth: 24960 bytes left Warning: Permanently added '[localhost]:1883' (ECDSA) to the list of known hosts. 2025/05/24 05:04:49 fuzzer started 2025/05/24 05:04:50 dialing manager at localhost:46087 [ 94.170094] cgroup: Unknown subsys name 'net' [ 94.320516] cgroup: Unknown subsys name 'cpuset' [ 94.370090] cgroup: Unknown subsys name 'rlimit' 2025/05/24 05:05:06 syscalls: 200 2025/05/24 05:05:06 code coverage: enabled 2025/05/24 05:05:06 comparison tracing: enabled 2025/05/24 05:05:06 extra coverage: enabled 2025/05/24 05:05:06 setuid sandbox: enabled 2025/05/24 05:05:06 namespace sandbox: enabled 2025/05/24 05:05:06 Android sandbox: enabled 2025/05/24 05:05:06 fault injection: enabled 2025/05/24 05:05:06 leak checking: enabled 2025/05/24 05:05:06 net packet injection: enabled 2025/05/24 05:05:06 net device setup: enabled 2025/05/24 05:05:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 05:05:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 05:05:06 USB emulation: enabled 2025/05/24 05:05:06 hci packet injection: enabled 2025/05/24 05:05:06 wifi device emulation: enabled 2025/05/24 05:05:06 802.15.4 emulation: enabled 2025/05/24 05:05:06 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 05:05:08 starting 8 fuzzer processes 05:05:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000040)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}, {@loose}, {@debug={'debug', 0x3d, 0x5f}}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x5}}, {}, {@version_u}, {@noextend}], [{@audit}, {@euid_gt={'euid>', r3}}, {@smackfsfloor}]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r6 = accept$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x7ff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8, {r3, r4}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, @out_args}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r12, 0x3304) r13 = accept4$inet(r6, 0x0, &(0x7f0000000700), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r14, {r3, r11}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r13, {r15, r11}}, './file0\x00'}) 05:05:08 executing program 0: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x184b9cbea63d04ab, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x81000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4c}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x91) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5fefc21bd6d349ef}, 0x4800) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3cc, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x939627f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6125c80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a79acad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcd9baa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e26851}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34986585}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ab58d9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e54277b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bd98d19}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66d99070}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b693eea}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb19f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9556}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x854}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x773ffc8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8825}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e88a1be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x787f3e65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4684}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1799bb29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x469}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x513f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x163ac2b6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d7a3651}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5364de55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x470a4540}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65f51d1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42811189}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b03aecb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cad4a02}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285323e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xead971e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dbbdf89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1aa55175}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71e7eb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1629ca06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6777}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33ad57af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaac}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1acc6831}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x755c9a9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37498304}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bdb0c9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753cae57}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e69e413}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa262}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x355d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf01f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47505cd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x708d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x712ce901}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6127792b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd09a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x81c8cc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ffb}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b9e940b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdef1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2394fa9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52639558}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x430b43e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3946}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47be}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf08}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73baff50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ef}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x2}, 0x2040000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xfa}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b00)={0x320, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xfffa}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xff}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x92f3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffc00}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xad0}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2000000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xd3}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xd612}, {0x8, 0xb, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffe}, {0x8, 0xb, 0x80}}]}, 0x320}, 0x1, 0x0, 0x0, 0x8800}, 0x4c010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfa}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x60}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket(0x1e, 0x3, 0x8d5) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000001200)="15465a86549816bd6f3077f699083c4324ecca6b7da05b55d92728efb9a60be0ff87fd2393e614b1bcb62f7efea9c3aed8df96ca928699162889e1de932e70302d1ed349eb7086272de21e6a46ce4ce5537decfff3bef2137a648d83eda4f956115b0cd624d01472b3a746054d791e", 0x6f) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) 05:05:08 executing program 2: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x280}]}, 0x40}, 0x1, 0x0, 0x0, 0x1c0c1}, 0x40000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5084}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4143}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbff3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x808bba1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2159cd43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58e2b8ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3372}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73a5}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2480}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) getsockname(r0, &(0x7f0000000380)=@xdp, &(0x7f0000000400)=0x80) r1 = accept$inet(r0, &(0x7f0000000440)={0x2, 0x0, @local}, &(0x7f0000000480)=0x10) setsockopt$inet_opts(r1, 0x0, 0x1f, &(0x7f00000004c0)="0d795311d52853ef32f707d3d8bbb9eb57e990d407e60cf7c3c1b38397f1a59642d8b66f6552ddb068c35de02ba8c9e7f3ebc51f63b71abddc3f19f737af1ca386c2ac15c7f565c1b915f7b875db7f6e192467be8854d6", 0x57) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x39a3046a3fd805ca}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x400) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24044011) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0506}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_ifreq(r0, 0x8993, &(0x7f00000009c0)={'bond0\x00', @ifru_ivalue}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000a00)=0x63, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000b40)=0xe8) r4 = accept(r1, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vcan0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000c00)) 05:05:08 executing program 3: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004094}, 0x4008084) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040050}, 0x4004080) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040d4}, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mq_timedreceive(r2, &(0x7f0000000400)=""/218, 0xda, 0x14000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x6, 0xad}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000780)={&(0x7f0000000540), 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x144, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd5, 0xa8, @random="a70748534fe7e8115722fcb51ac2bb682def3f00e7398b4bd328a6277730cb8f8279cfa2254cdbee4ab8942d30118484ecb6b8ad7d35cb0e6dc494b627e9b290f60191d524f90a05c2961c9e084b5008c915527eb9d3b7a80688b34d3affd34aa9873f6b2f284615b594b56800ff7c464fd9db1d33d9e8c80b4d13a2c81ad95f736e96467ca6d2be7a1488d02cc5c3f409bd9fd7c3232ac385adddfb015869a9ab4fbe2b7a5f27e711eda869fb9269c47f1ea9ce1af57c35f131c64a60ab83c61e0b00e26f2a98ad542907dcc729b89158"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000880}, 0x8010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40041) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x88}}, 0x20002800) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20044005}, 0x1fc518eccd6965e2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe43}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x8801) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x402, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x81) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000006480)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006440)={&(0x7f00000063c0)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8}]}]}, 0x6c}}, 0x810) [ 111.847048] audit: type=1400 audit(1748063108.227:7): avc: denied { execmem } for pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:05:08 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = socket$inet6(0xa, 0x761a21c145f33954, 0x9) ioctl$sock_ifreq(r0, 0xd1, &(0x7f0000000200)={'veth1_to_batadv\x00', @ifru_addrs=@xdp}) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f0000001400)=""/86, 0x56}], 0x4, &(0x7f00000014c0)=""/29, 0x1d}, 0x7}], 0x1, 0x0, &(0x7f0000001580)={r1, r2+60000000}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x10010, 0xffffffffffffffff, 0x8000000) r4 = mq_open(&(0x7f00000015c0)='{@]\x00', 0x2, 0x12, &(0x7f0000001600)={0x0, 0x4, 0x8, 0x25}) syz_io_uring_submit(r3, 0x0, &(0x7f0000001780)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x2004, @fd=r4, 0x6, &(0x7f0000001740)=[{&(0x7f0000001640)=""/241, 0xf1}], 0x1}, 0x48000000) recvmsg(r0, &(0x7f0000001c80)={&(0x7f0000001a00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a80)=""/51, 0x33}, {&(0x7f0000001ac0)=""/94, 0x5e}, {&(0x7f0000001b40)=""/210, 0xd2}], 0x3}, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001cc0)={'erspan0\x00', r5, 0x20, 0xa89ce0dba7eeb319, 0x2, 0x77, {{0x16, 0x4, 0x0, 0x3, 0x58, 0x67, 0x0, 0x7f, 0x29, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x3c, 0xd1, 0x3, 0x6, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1ff}, {@loopback, 0x1f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@broadcast, 0x1f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0xaf}]}, @ra={0x94, 0x4}, @noop]}}}}}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x98, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @random="988b5fc123f6dfa429eca6"}, @handle=@pci={{0x8}, {0x11}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x81) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001f00)={'vxcan1\x00'}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000001f40)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc}, 0x200) mq_timedsend(r4, &(0x7f0000001f80)="9378704b24e00aa2dfbeaf7463eeb12820bc044211bf23711b168447eb9708e7dfb01a893d326d82045b1583212e1bc5dfeec7146ec3d95845a4fcfc83b7f773c09a6a0a9b08acf088fe1989e317abe659df11570795725d0720dfa8bdda269c9c1728f6248e49c1f94e56d3c585c9b92ea7e9c2a51fe15dc32138ec271fc2ffae154546", 0x84, 0xc3e, &(0x7f0000002040)={0x0, 0x3938700}) r7 = accept(r0, &(0x7f0000002080)=@alg, &(0x7f0000002100)=0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000002180)={{0x1, 0x1, 0x18, r7, {r9}}, './file0\x00'}) 05:05:08 executing program 5: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048045) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x5, 0x7ff, {{0x1e, 0x4, 0x1, 0x2d, 0x78, 0x64, 0x0, 0x81, 0x29, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x2b, 0x83, [@dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "e14172c8c2807ef07b66"}]}, @lsrr={0x83, 0x7, 0xff, [@remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0x3, [0x8, 0x5, 0x8]}, @lsrr={0x83, 0xb, 0x1f, [@dev={0xac, 0x14, 0x14, 0x80}, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000440)={0x4d4, 0x0, 0xa90, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r3}, {0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x81, 0x7f, 0x2, 0x1}, {0x4, 0x6, 0x0, 0x3}, {0xff, 0xaa, 0x0, 0x4}, {0x0, 0x7, 0x4, 0x1}, {0x200, 0x6, 0x5, 0xb25}, {0x883c, 0x95, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf513}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x7, 0x1f, 0x9}, {0x2, 0x15, 0x1, 0x1f}, {0xfff9, 0x6, 0xe6, 0x7e1c}, {0x56f9, 0x9, 0x9, 0x4}, {0x5, 0x3, 0x7, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x404c050}, 0x10) r4 = socket(0x26, 0xa, 0x0) r5 = accept(r4, 0x0, &(0x7f00000009c0)) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000a00)="e4287cf50ddde2e7a71b79bd7d194ba9bba237c638fea775f3f44c04287266b4eeaeb88df056f13e88db8e4a23e0969e0367713aedde2aed21e87fc3b146560d792f4d6c515f547ad9f89ec3b2141fbd198e638ac72cd086b05e0030f42e301ca1f3b1b4241ef51de62f6ff084f325b4437e965a4fdac509c1d1fb5c2451ed73ddd68d60256b24c40c9bdd03863942fce5601c0c796b97b8e56f3625d8d6a69fcffcd24a464b2cca99a995b8680a31", 0xaf) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000b80)=@buf={0xbc, &(0x7f0000000ac0)="d9d2f97da5c2f2c74970a800889c603cc821c2d2e7e872d20254a5502e0f83365e7d64d19e4c7abe0e1fc05c7dd89b5a8622ec389436c52ab894401d022ca3fd75633039f86c2d4b6d25777a97722a82be6d583d852df75a82b92980e9a5a963ef719262f0d750003fbae6d11b2dfbb6469a68ae52931f798dddfcb5f714ab9dd6858a77ffcc01f822e327dca84b5dcadb49a39e52fd6030f9cfb67026b988016dc160e10ba1ded39e29e02019b2fcea90a72172fdd39c0dc272bc96"}) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r5, &(0x7f0000000bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000c40)=0x80) pipe2$9p(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r6, &(0x7f0000000cc0)={0x7, 0x21, 0x2}, 0x7) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x120, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000f40)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) 05:05:08 executing program 6: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000080)={0x4}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'a', ' *:* ', 'm\x00'}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000890) recvmmsg$unix(r0, &(0x7f0000005600)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/249, 0xf9}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000a00)=""/117, 0x75}], 0xa, &(0x7f0000000b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/41, 0x29}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/72, 0x48}, {&(0x7f0000000e80)=""/82, 0x52}], 0x4, &(0x7f0000000f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001080)=""/5, 0x5}, {&(0x7f00000010c0)=""/248, 0xf8}, {&(0x7f00000011c0)=""/68, 0x44}, {&(0x7f0000001240)=""/113, 0x71}, {&(0x7f00000012c0)=""/141, 0x8d}, {&(0x7f0000001380)=""/1, 0x1}, {&(0x7f00000013c0)=""/104, 0x68}, {&(0x7f0000001440)=""/77, 0x4d}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001600)=""/49, 0x31}, {&(0x7f0000001640)=""/104, 0x68}, {&(0x7f00000016c0)=""/167, 0xa7}, {&(0x7f0000001780)=""/55, 0x37}, {&(0x7f00000017c0)=""/60, 0x3c}, {&(0x7f0000001800)=""/244, 0xf4}, {&(0x7f0000001900)=""/139, 0x8b}, {&(0x7f00000019c0)=""/134, 0x86}, {&(0x7f0000001a80)=""/205, 0xcd}], 0x9}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/69, 0x45}, {&(0x7f0000002d40)=""/191, 0xbf}, {&(0x7f0000002e00)=""/136, 0x88}, {&(0x7f0000002ec0)=""/153, 0x99}, {&(0x7f0000002f80)=""/213, 0xd5}, {&(0x7f0000003080)=""/199, 0xc7}, {&(0x7f0000003180)=""/132, 0x84}], 0x8, &(0x7f00000032c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000003300)=""/41, 0x29}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/243, 0xf3}, {&(0x7f0000004440)=""/72, 0x48}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/2, 0x2}], 0x6, &(0x7f0000005580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x7, 0x0, &(0x7f00000057c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000005800)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000005840)={{0x1, 0x1, 0x18, r6, {0x7, 0x5959}}, './file0\x00'}) r7 = io_uring_setup(0x9, &(0x7f0000005880)={0x0, 0x5d99, 0x10, 0x1, 0x276, 0x0, r5}) io_uring_setup(0x3ef4, &(0x7f0000005900)={0x0, 0x8780, 0x1, 0x0, 0x288, 0x0, r7}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000005cc0)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005c80)={&(0x7f00000059c0)={0x290, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1d8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8737}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1c0}]}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x485}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x854}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfa7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x38000000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x290}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) io_uring_setup(0x635, &(0x7f0000005d00)={0x0, 0x3200, 0x21, 0x2, 0x32d}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000005e00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000005f00)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e40)={0x44, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x92}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000006040)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006000)={&(0x7f0000005fc0)={0x34, 0x0, 0xe6c12a75cd2e7485, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x136a4c3284920e3e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c040000}, 0x20000010) 05:05:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000044}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc160}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e69e4a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a523076}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65a89417}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x291f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58647bef}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a1d3f51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x542a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3691faad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1433d693}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a97f359}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x589a8476}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26394029}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cd3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5648c750}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37aa0d52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadeb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x11}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x801) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044080}, 0x24004800) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf0, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffe}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x5}, 0x40800) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000cc0)={0x450, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8b255ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1050f427}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fe95b7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39f5e870}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1253eece}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80637ed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f82875b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa1e95bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1aed9941}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bf3f231}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53ef1d5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3298cdca}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbe6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17d45e4a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74fccfdf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41e33b1a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da514ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa5550de}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5949d644}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf70f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x291b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dbe7f4d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65176952}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e4cc2a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x641b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36b6142d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xde0375e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a4300d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14245ad3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a498a18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ef2dae2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x777ed51a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17ccb645}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1029f0d3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7036c0f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a041f8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x686d546f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c93cbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dd41fe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cacb337}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63cd78e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36c7392c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5446146f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e0f5a0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573adca5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f4352a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c41b66a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x358e1afc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57fdfd9f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62ad22aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8f062db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dcbd2a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28a0060a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21fc98df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x136775a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d9aa49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27d3d3ff}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x533962e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c0f7101}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73821c60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2097e846}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37fc69fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cea5bcb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a6ec24e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31744d00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}]}]}, 0x450}}, 0x10) [ 113.590797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.595015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.597764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.604140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.608990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.662675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.666022] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.668547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.676506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.680315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.721684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.724426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.728968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.737734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.741451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.800864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.804408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.807024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.813004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.846300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.848657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.851014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.853186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.862230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.867178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.872443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.885721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.891112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.893061] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.898210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.900018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.915601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.925125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.934887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.949832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.966686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.985641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.011025] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.022261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.066724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.673297] Bluetooth: hci0: command tx timeout [ 115.736514] Bluetooth: hci1: command tx timeout [ 115.799476] Bluetooth: hci2: command tx timeout [ 115.992728] Bluetooth: hci7: command tx timeout [ 115.993488] Bluetooth: hci4: command tx timeout [ 115.993856] Bluetooth: hci6: command tx timeout [ 116.056656] Bluetooth: hci5: command tx timeout [ 116.119766] Bluetooth: hci3: command tx timeout [ 117.720124] Bluetooth: hci0: command tx timeout [ 117.784513] Bluetooth: hci1: command tx timeout [ 117.847509] Bluetooth: hci2: command tx timeout [ 118.039714] Bluetooth: hci6: command tx timeout [ 118.040847] Bluetooth: hci4: command tx timeout [ 118.041829] Bluetooth: hci7: command tx timeout [ 118.103589] Bluetooth: hci5: command tx timeout [ 118.167599] Bluetooth: hci3: command tx timeout [ 119.768942] Bluetooth: hci0: command tx timeout [ 119.832049] Bluetooth: hci1: command tx timeout [ 119.895516] Bluetooth: hci2: command tx timeout [ 120.087719] Bluetooth: hci6: command tx timeout [ 120.087745] Bluetooth: hci7: command tx timeout [ 120.087821] Bluetooth: hci4: command tx timeout [ 120.151504] Bluetooth: hci5: command tx timeout [ 120.215907] Bluetooth: hci3: command tx timeout [ 121.815915] Bluetooth: hci0: command tx timeout [ 121.880469] Bluetooth: hci1: command tx timeout [ 121.943714] Bluetooth: hci2: command tx timeout [ 122.135575] Bluetooth: hci7: command tx timeout [ 122.136293] Bluetooth: hci4: command tx timeout [ 122.136344] Bluetooth: hci6: command tx timeout [ 122.199447] Bluetooth: hci5: command tx timeout [ 122.263495] Bluetooth: hci3: command tx timeout [ 173.379293] syz-executor.4 (294) used greatest stack depth: 24944 bytes left [ 175.335792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.338990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.340469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.346506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.349730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.390951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.393254] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.394693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.408520] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.419741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.564907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.568813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.582723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.605893] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.609510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.633275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.636960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.641072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.647896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.668171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.671696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.677730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.684820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.689985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.694972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.700270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.716755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.716969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.720779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.731206] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.732834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.767957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.773740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.790231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.794944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.815699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.823099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.831331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.903845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.917065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.432625] Bluetooth: hci0: command tx timeout [ 177.496585] Bluetooth: hci1: command tx timeout [ 177.689513] Bluetooth: hci2: command tx timeout [ 177.815447] Bluetooth: hci3: command tx timeout [ 177.879578] Bluetooth: hci6: command tx timeout [ 177.944491] Bluetooth: hci4: command tx timeout [ 177.944576] Bluetooth: hci5: command tx timeout [ 178.519492] Bluetooth: hci7: command tx timeout [ 179.480198] Bluetooth: hci0: command tx timeout [ 179.543507] Bluetooth: hci1: command tx timeout [ 179.736004] Bluetooth: hci2: command tx timeout [ 179.864448] Bluetooth: hci3: command tx timeout [ 179.927488] Bluetooth: hci6: command tx timeout [ 179.992588] Bluetooth: hci4: command tx timeout [ 179.992623] Bluetooth: hci5: command tx timeout [ 180.568438] Bluetooth: hci7: command tx timeout [ 181.527595] Bluetooth: hci0: command tx timeout [ 181.591750] Bluetooth: hci1: command tx timeout [ 181.783563] Bluetooth: hci2: command tx timeout [ 181.911848] Bluetooth: hci3: command tx timeout [ 181.975713] Bluetooth: hci6: command tx timeout [ 182.039496] Bluetooth: hci4: command tx timeout [ 182.039947] Bluetooth: hci5: command tx timeout [ 182.615619] Bluetooth: hci7: command tx timeout [ 183.575878] Bluetooth: hci0: command tx timeout [ 183.639892] Bluetooth: hci1: command tx timeout [ 183.832895] Bluetooth: hci2: command tx timeout [ 183.959765] Bluetooth: hci3: command tx timeout [ 184.024008] Bluetooth: hci6: command tx timeout [ 184.087452] Bluetooth: hci5: command tx timeout [ 184.087481] Bluetooth: hci4: command tx timeout [ 184.665400] Bluetooth: hci7: command tx timeout [ 237.683773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.688080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.693613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.702541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.707976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.765876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.771495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.776902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.781084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.789829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.810572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.853596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.856925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.859654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.865688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.874312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.877408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.879462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.895085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.898938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.938783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.940942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.942118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.945008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.946814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.001145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.026245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.027782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.058121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.061473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.067810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.075214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.077046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.084271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.095839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.103836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.111693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.119224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.131895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.176757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.768442] Bluetooth: hci0: command tx timeout [ 239.832502] Bluetooth: hci1: command tx timeout [ 239.959739] Bluetooth: hci5: command tx timeout [ 239.960542] Bluetooth: hci3: command tx timeout [ 240.023485] Bluetooth: hci2: command tx timeout [ 240.151445] Bluetooth: hci4: command tx timeout [ 240.215525] Bluetooth: hci6: command tx timeout [ 240.216189] Bluetooth: hci7: command tx timeout [ 241.815445] Bluetooth: hci0: command tx timeout [ 241.880739] Bluetooth: hci1: command tx timeout [ 242.008154] Bluetooth: hci3: command tx timeout [ 242.008817] Bluetooth: hci5: command tx timeout [ 242.071666] Bluetooth: hci2: command tx timeout [ 242.200491] Bluetooth: hci4: command tx timeout [ 242.263797] Bluetooth: hci7: command tx timeout [ 242.264272] Bluetooth: hci6: command tx timeout [ 243.864506] Bluetooth: hci0: command tx timeout [ 243.927690] Bluetooth: hci1: command tx timeout [ 244.056602] Bluetooth: hci5: command tx timeout [ 244.057104] Bluetooth: hci3: command tx timeout [ 244.120498] Bluetooth: hci2: command tx timeout [ 244.247756] Bluetooth: hci4: command tx timeout [ 244.312492] Bluetooth: hci6: command tx timeout [ 244.312992] Bluetooth: hci7: command tx timeout [ 245.912755] Bluetooth: hci0: command tx timeout [ 245.976655] Bluetooth: hci1: command tx timeout [ 246.104652] Bluetooth: hci5: command tx timeout [ 246.105148] Bluetooth: hci3: command tx timeout [ 246.167535] Bluetooth: hci2: command tx timeout [ 246.296200] Bluetooth: hci4: command tx timeout [ 246.360990] Bluetooth: hci7: command tx timeout [ 246.361526] Bluetooth: hci6: command tx timeout [ 298.293497] syz-executor.6 (5129) used greatest stack depth: 24704 bytes left [ 300.267466] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.271050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.273922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.283190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.290210] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.447085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.451641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.454233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.464562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.470688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.507783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.529697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.550429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.558624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.574913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.604447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.617768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.623061] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.625498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.643712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.654829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.657319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.669217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.693831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.694392] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.704128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.719308] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.748994] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.779742] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.787292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.790428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.805249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.820003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.828294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.843590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.855247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.866313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.869710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.891628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.905063] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.359700] Bluetooth: hci0: command tx timeout [ 302.552482] Bluetooth: hci1: command tx timeout [ 302.743757] Bluetooth: hci2: command tx timeout [ 302.807452] Bluetooth: hci3: command tx timeout [ 302.935442] Bluetooth: hci4: command tx timeout [ 302.999671] Bluetooth: hci6: command tx timeout [ 302.999780] Bluetooth: hci7: command tx timeout [ 303.000687] Bluetooth: hci5: command tx timeout [ 304.410462] Bluetooth: hci0: command tx timeout [ 304.600589] Bluetooth: hci1: command tx timeout [ 304.791429] Bluetooth: hci2: command tx timeout [ 304.856453] Bluetooth: hci3: command tx timeout [ 304.984605] Bluetooth: hci4: command tx timeout [ 305.047448] Bluetooth: hci7: command tx timeout [ 305.047471] Bluetooth: hci6: command tx timeout [ 305.047894] Bluetooth: hci5: command tx timeout [ 306.455459] Bluetooth: hci0: command tx timeout [ 306.648422] Bluetooth: hci1: command tx timeout [ 306.839449] Bluetooth: hci2: command tx timeout [ 306.903461] Bluetooth: hci3: command tx timeout [ 307.031444] Bluetooth: hci4: command tx timeout [ 307.095586] Bluetooth: hci5: command tx timeout [ 307.096605] Bluetooth: hci6: command tx timeout [ 307.097031] Bluetooth: hci7: command tx timeout [ 308.504651] Bluetooth: hci0: command tx timeout [ 308.695425] Bluetooth: hci1: command tx timeout [ 308.889674] Bluetooth: hci2: command tx timeout [ 308.952407] Bluetooth: hci3: command tx timeout [ 309.079505] Bluetooth: hci4: command tx timeout [ 309.144689] Bluetooth: hci7: command tx timeout [ 309.145127] Bluetooth: hci6: command tx timeout [ 309.145615] Bluetooth: hci5: command tx timeout [ 362.602938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.606089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.608676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.619130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.624486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.814280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.819932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.822942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.841599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.852086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.866895] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.877662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.882071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.892079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.899943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.957608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.964578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.976167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.988315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.994169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.001046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.003871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.009117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.024581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.037417] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.158746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.165222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.167792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.172584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.176729] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.607703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.613650] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.661207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.717793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.729095] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.746817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.769735] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.795425] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.840321] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.878624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.696453] Bluetooth: hci0: command tx timeout [ 364.951679] Bluetooth: hci1: command tx timeout [ 364.952541] Bluetooth: hci2: command tx timeout [ 365.079589] Bluetooth: hci3: command tx timeout [ 365.143490] Bluetooth: hci4: command tx timeout [ 365.207451] Bluetooth: hci5: command tx timeout [ 365.975509] Bluetooth: hci7: command tx timeout [ 366.040564] Bluetooth: hci6: command tx timeout [ 366.743539] Bluetooth: hci0: command tx timeout [ 367.000683] Bluetooth: hci1: command tx timeout [ 367.001549] Bluetooth: hci2: command tx timeout [ 367.128029] Bluetooth: hci3: command tx timeout [ 367.192567] Bluetooth: hci4: command tx timeout [ 367.255491] Bluetooth: hci5: command tx timeout [ 368.025486] Bluetooth: hci7: command tx timeout [ 368.087693] Bluetooth: hci6: command tx timeout [ 368.791433] Bluetooth: hci0: command tx timeout [ 369.048324] Bluetooth: hci1: command tx timeout [ 369.048464] Bluetooth: hci2: command tx timeout [ 369.175439] Bluetooth: hci3: command tx timeout [ 369.239838] Bluetooth: hci4: command tx timeout [ 369.304436] Bluetooth: hci5: command tx timeout [ 370.074386] Bluetooth: hci7: command tx timeout [ 370.137381] Bluetooth: hci6: command tx timeout [ 370.839673] Bluetooth: hci0: command tx timeout [ 371.095615] Bluetooth: hci2: command tx timeout [ 371.096104] Bluetooth: hci1: command tx timeout [ 371.223473] Bluetooth: hci3: command tx timeout [ 371.287729] Bluetooth: hci4: command tx timeout [ 371.351509] Bluetooth: hci5: command tx timeout [ 372.121439] Bluetooth: hci7: command tx timeout [ 372.183651] Bluetooth: hci6: command tx timeout [ 419.288921] kworker/u10:3 (108) used greatest stack depth: 23920 bytes left VM DIAGNOSIS: 05:10:18 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff817408f7 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff85c1d1c0 RSP=ffff88806ce089c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff81740846 R13=0000000000000202 R14=ffff888018238000 R15=ffff88800de594a0 RIP=ffffffff8151ac47 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd1e7dd6368 CR3=000000002f2e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000020c5 RBX=ffff888035b2b700 RCX=0000000000000002 RDX=ffff888035b2c158 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffff888035b2c158 RSP=ffff88806cf08880 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=0000000000000028 R13=0000000000000000 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81518d10 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffecf69ff48 CR3=000000002704a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000